last executing test programs: 1m12.908866458s ago: executing program 3 (id=86): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x8, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r2}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r4}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r9}, 0x18) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200010, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") openat2(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x517002, 0x0, 0xc}, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r10 = fsopen(&(0x7f0000000240)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) r11 = fsmount(r10, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r10, 0x4, &(0x7f0000000040)='/]{[,/$\x01\\[#@\\-^(}@!!\']{*:,##\x00', &(0x7f0000000080)='./file0\x00', r11) close_range(r9, r8, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00', r6}, 0x10) r12 = socket(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000140), &(0x7f0000000080)=@udp=r12}, 0x20) 1m12.63091604s ago: executing program 3 (id=90): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0xc, 0x101301) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003b3520b60c643365739c193e704cb1edeafacbf671db43b34247202778c0195e3614e70a6cf9e62e942a97197079b22ba5fcab05cb1c15fb3af0323ada56da9fba3d868efe269dd23f073a261a69cd8eda8f440e642cf3e1a4b4fc78f708aac01f506f02582171ba95095ea90341d67d04d2eee6b8069dd7ae929fadfc72408409f63844d82c924b1c2815f35d0000", @ANYRES16=r2, @ANYBLOB="01032bbd7000fbdbdf2504000000"], 0x14}}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001006c617374000000006c000280080001400000000508000140000000090c00024000000000000078260c0002400005"], 0x140}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x80, &(0x7f0000000000), 0x1, 0x4dd, &(0x7f0000000240)="$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") ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000b40)=ANY=[@ANYBLOB="0200a0d3948706b497cdc838e29e1b0b008d8e17f00602043bd501e31c4326f4320b3d96bb8dd3ffa611a1e5439581fe3e711a87141b25529ce3247ba15a87feea3c82e754cd2d3fb797aa11e4c1ecede62a833a88eb6bedccd46aa7b68b93c68fbf7aa876b9a9698f5d236f0a35b690adc001b32058cbb5eacf9f97d87460fe6b5c4f49cdef9975c6b94d3ef610698de1270806939589451a6366d638987e25bef37dfe7362c073d117f629ff29090cf8c764c178f3faf8b1b7fea615f3c2822ed8420e6158d534ad960000000000", @ANYRESHEX=r4, @ANYBLOB="881e6ae6aedff0d8d9502f4916e60f8514701c31f6d571bc9093fd"]) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r6, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) r7 = socket$nl_audit(0x10, 0x3, 0x9) r8 = syz_open_dev$mouse(0x0, 0x9, 0x181040) preadv(r8, 0x0, 0x0, 0x6, 0x3) sendmsg$AUDIT_TTY_SET(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x18, 0x3f9, 0x100, 0x70bd26, 0x25dfdbff}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x20000004) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="040002803f1834ff473f790bf8dd5b4f656837ad65af5119020ccb36491bd88ee8ffdfc52f1930587aafa59032a8f21113a769dc55ab2e064ec08477cea8556439cb70c7c7ddf0d1d5f72a"], 0x24}}, 0x0) close(r1) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f00000007c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r10, @ANYBLOB="000228bd7000fcdbff25490075000c009900018000008297833b"], 0x20}, 0x1, 0x0, 0x0, 0x67e50b3493db10e0}, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r11}, 0x10) r12 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) readv(r12, &(0x7f0000000240)=[{&(0x7f0000000080)=""/147, 0x93}], 0x1) ioctl$IMADDTIMER(r12, 0x80044940, &(0x7f0000000000)) 1m12.358916222s ago: executing program 3 (id=96): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000060) 1m12.207078113s ago: executing program 3 (id=97): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000280), 0x1, 0x76a, &(0x7f0000001b00)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) sendfile(r1, r1, 0x0, 0xfffe80) 1m12.039220323s ago: executing program 3 (id=100): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0xffff, 0x0, 0x0, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000180)={0x5, &(0x7f0000000140)=[{0xd330, 0x80, 0x1, 0x1}, {0x100, 0x4, 0x7, 0x8}, {0x2, 0x5, 0xca, 0x3}, {0x3, 0x9, 0x1, 0x19da}, {0x40, 0x5, 0x1, 0x1f}]}) syz_emit_ethernet(0x32, &(0x7f0000000000)={@random="e90c630faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0x2, 0x0, @val=0x80}}}}}}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0xffff, 0x8}}}}}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x20081e, &(0x7f0000000040)={[{@nodelalloc}, {@grpid}, {@auto_da_alloc}]}, 0x1, 0x4f4, &(0x7f00000008c0)="$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") r1 = fsopen(&(0x7f0000000440)='udf\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000480)='async\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000ed7f0000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000f172121d218d8b2c13a078663524b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) fallocate(r3, 0x0, 0x0, 0x20000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000000)={0x1800, r5, 0xa}) 1m11.540264026s ago: executing program 3 (id=102): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xc00}], 0x1, &(0x7f00000011c0)=ANY=[@ANYBLOB="1400000000000000010000002500000002010000000000004800000000000000080000000700000010000034366567f2219787566400007300000000000000000000000008000000ef3820f3439cb150a3651e799e1459c9c9a7521737a8879e3ef4dca1e3c32158996e4b2abde5342e22f2ba8b679121ac0b0ad62ade31fb2c47f0bbf781eb8bd1e3064141e90e9eac25b189c0da98b676571bbeefba392c3e15a10e03dee4ae1dfe99793e51ec0c6bb5fa6d7b357d249502f5919ef251e5d0e5bed378265b8bd55fde4689cb509b14fa754813a27e72d175e8d677420e10d651833e6e2ab8168b1d633b1bb9a7d4d59ebdc7083d93d35cd469de", @ANYRES32=0x0, @ANYBLOB="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"], 0x6b}, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = gettid() r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000080)={0x335}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue1\x00'}) tkill(r2, 0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000010c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="000000000000000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095000000000000000b89770fee1998c26b38ccea6c5f72c6e097d989e8b5c400"/95], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) keyctl$link(0x8, r0, r0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x60}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x48, &(0x7f0000000a00)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x12, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00', {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, [{0x22}]}}}}}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="48000000000101040000ff0f0000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000010000580090001"], 0x48}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='mm_page_alloc\x00'}, 0x10) 56.493773876s ago: executing program 32 (id=102): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0", 0xc00}], 0x1, &(0x7f00000011c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x6b}, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = gettid() r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000080)={0x335}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue1\x00'}) tkill(r2, 0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000010c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="000000000000000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095000000000000000b89770fee1998c26b38ccea6c5f72c6e097d989e8b5c400"/95], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) keyctl$link(0x8, r0, r0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x60}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x48, &(0x7f0000000a00)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x12, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00', {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, [{0x22}]}}}}}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="48000000000101040000ff0f0000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000010000580090001"], 0x48}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='mm_page_alloc\x00'}, 0x10) 44.550574246s ago: executing program 0 (id=448): r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10, 0x0}, 0xc4050000}], 0x1, 0x0) 44.417541067s ago: executing program 0 (id=452): r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x8, &(0x7f00000011c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x6b}, 0x0) close(r0) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) gettid() r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r3, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000080)={0x335}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000010c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="000000000000000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095000000000000000b89770fee1998c26b38ccea6c5f72c6e097d989e8b5c400"/95], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) keyctl$link(0x8, r1, r1) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0x4c80, &(0x7f0000005780)={0x0, 0x0, "ac563d05d310141258e0a2a06783eb29e46b1fac57461914278705b6afba000000000000536dfdc9ce9c12d1207f8a3ad1dad7ed0fc16b2ccd00000000000000180000000c0996d78e489eef651d35ca509de7cf52e7578e9ce37710000001000032936e283ae72a63729b333fc1ee6b15fb899a2072631f76cd0a59b1709500000000000000c0df2d95b9c3fbccef0111f1fc6db466c73268074c38df1f6bf2cc88aa61ffffffff2b887e04e671d55f281047000002000000000003000000000100000039fb00", "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"}) 43.590606922s ago: executing program 0 (id=481): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000000)={'a', ' *:* ', 'w\x00'}, 0x8) r4 = openat$cgroup_devices(r2, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f00000000c0)={'c', ' *:* ', 'rwm\x00'}, 0xa) write$cgroup_devices(r3, &(0x7f00000001c0)={'b', ' *:* ', 'r\x00'}, 0x8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x1, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x4, 0xa}, {0x9, 0xd}, {0x1a, 0x5}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010000305000000000000000a00000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5], 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x50}, 0x1, 0xba01}, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x13f, 0x13f, 0x3, [@type_tag={0xb, 0x0, 0x0, 0x12, 0x2}, @enum={0x8, 0x2, 0x0, 0x6, 0x4, [{0x3, 0x7f}, {0x2, 0x7}]}, @float={0x9, 0x0, 0x0, 0x10, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3, 0x4f}}, @volatile={0x9, 0x0, 0x0, 0x9, 0x2}, @enum={0x0, 0x3, 0x0, 0x6, 0x4, [{0xf, 0x5}, {0x1, 0xfffffffc}, {0x3, 0x6}]}, @enum64={0xc, 0x9, 0x0, 0x13, 0x0, 0xc, [{0x3, 0x200, 0xdc}, {0x1, 0x7, 0x200}, {0x1, 0x6, 0x2}, {0x9, 0xa, 0x3}, {0x5, 0x0, 0x8}, {0x6, 0xe, 0x4}, {0x5, 0x3, 0xe155}, {0xc, 0xc, 0x7}, {0xf, 0xe3, 0xb7a}]}, @typedef={0xa, 0x0, 0x0, 0x8, 0x1}, @type_tag={0xb, 0x0, 0x0, 0x12, 0x3}, @datasec={0x6, 0x3, 0x0, 0xf, 0x3, [{0x1, 0x80, 0x10001}, {0x5, 0x8, 0x8}, {0x4, 0x1000, 0xffffff81}], "31ef90"}]}, {0x0, [0x30]}}, &(0x7f0000000440)=""/124, 0x15b, 0x7c, 0x0, 0x10001, 0x0, @void, @value}, 0x28) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = semget$private(0x0, 0x7, 0x0) semtimedop(r9, &(0x7f0000000080)=[{0x0, 0xfff9}], 0x1, 0x0) 43.357062933s ago: executing program 0 (id=485): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000002c0)={[{@init_itable}, {@resuid}, {@stripe}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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") r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r3, 0x0, 0x0) syz_clone(0x4000, &(0x7f0000000400), 0x0, 0x0, 0x0, 0x0) getdents(r3, &(0x7f0000000340)=""/145, 0x91) (fail_nth: 2) 42.899797496s ago: executing program 0 (id=489): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b6fffec850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0, 0x0, 0x6}, 0x18) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000003100)=@gcm_128={{0x303}, "0400", "0d07080d004fcf0000e8ffff1a8600", "cf0d00", "8657e2b7e43b34e4"}, 0x28) write$binfmt_script(0xffffffffffffffff, &(0x7f0000001300), 0x8f) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000740)=0x40) writev(0xffffffffffffffff, &(0x7f00000030c0)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000013c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001380)=0x40) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0x1}], 0x1) 42.582524548s ago: executing program 0 (id=494): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) clock_gettime(0x0, &(0x7f0000000480)) (fail_nth: 4) 42.537319618s ago: executing program 33 (id=494): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) clock_gettime(0x0, &(0x7f0000000480)) (fail_nth: 4) 2.113947077s ago: executing program 2 (id=1370): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f0000000280)={[{@discard}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2a}}, {@stripe={'stripe', 0x3d, 0x8}}, {@orlov}, {@dioread_nolock}]}, 0x4, 0x45b, &(0x7f00000010c0)="$eJzs281rHOUfAPDvTJL217dfYq0vfVGjVQy+JE1atQcvioIHBcFLPcYkLbXbRpoIthStIvUoBcGjeBT8CzzpRdST4FXvUijSi9XTyuzOdF+6u0nTTabNfj4w2eeZeWbn+c4zz+4z82QDGFjj2Z8kYmdE/B4Ro/Vsa4Hx+sv1axfm/rl2YS6JavWtv5Jaub+vXZgrihb77cgzE2lE+mkS+zscd+nc+VOzlcrC2Tw/tXz6vamlc+efPXl69sTCiYUzM0ePHjk8/cLzM8/1Jc57srru+3DxwN7X3r78xtyxy+/8/G1SxN8WR5+M99r4RLXa58OVa1dTOhlexQ5D61gZVi1rhqy5Rmr9fzSGotF4o/HqJ6VWDlhX1VyXzRerwCaWRNk1AMpRfNFn97/FsnGjj/Jdfal+A5TFfT1f6luGI83LjLTd3/bTeEQcu/jvV9kS6/McAgCgxffZ+OeZTuO/NO5vKvf/2FqbGxrL51J2R8S9EbEnIu6LqJV9ICIe7HSQHhMC7ZMkN49/0itrj25l2fjvxXxuq3X8V4z+Ymwoz+2qxT+SHD9ZWThUOycREzGyNctP9zjGD6/89nm3bc3jv2zJjl+MBfN6XBne2rrP/Ozy7O3E3OzqxxH7hjvFn9yYCUgiYm9E7FvjMU4+9c2BbttWjr+H1cwzraD6dcST9fa/GG3xF5Le85NT/4vKwqGp4qq42S+/Xnqz2/FvK/4+yNp/e8fr/0b8Y0nzfO3Srbx7vXdf+uOzrvc0k2u6/hsrtuSvH8wuL5+djtiSvF6vdPP6mca+Rb4on8U/cbBz/98djTOxPyKyi/ihiHg4Ih7Jo3s0Ih6LiIM9zsJPLz/+bq8zVHb7z7e1/1hrkbb2byS2RPuazomhUz9+1/qOjeTqPv+O1FIT+Zra59+XveNaTb1u9WoGAACAu1UaETsjSSdvpNN0crL+P/x7YntaWVxafvr44vtn5uu/ERiLkbR40jXa9Dx0Or+tL/IzbfnD+XPjL4a21fKTc4uV+bKDhwG3o0v/z/zpNxqw+fVhHg24S+n/MLj0fxhc+j8Mrg79f1sZ9QA2Xqfv/49KqAew8dr6v2k/GCDu/2Fw6f8wuJr7f1JiPYANtbQtVv6R/GZIVKvV6h1Qjc2TiPSOqEZ/Esk694KdZQd464myP5kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD6478AAAD//+Jk61o=") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) mount$9p_fd(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@generic={&(0x7f0000000180)='./bus\x00', r0}, 0x18) get_robust_list(0x0, &(0x7f0000000680)=0x0, &(0x7f00000006c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="88000000000201040000000000000000020000002400028014000180080001000000000008000200ac1e00010c00028005000100000000002400038014000180090001000000000008000200ac1414000c00028005000100000000002c0001"], 0x88}}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 1.954819178s ago: executing program 2 (id=1377): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) r4 = perf_event_open(&(0x7f0000000600)={0x4, 0x80, 0x0, 0x1, 0x3, 0x3, 0x0, 0x0, 0x800, 0x9, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x9, 0x3}, 0x4040, 0x2, 0x80, 0x8, 0x9, 0x9, 0xf33, 0x0, 0x7, 0x0, 0x8}, 0x0, 0xb, r1, 0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in=@empty, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000780)=0xe8) quotactl_fd$Q_GETFMT(r4, 0xffffffff80000402, r5, &(0x7f0000000840)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) preadv(r0, &(0x7f0000000440)=[{}, {&(0x7f0000000040)=""/31, 0x1f}, {&(0x7f00000001c0)=""/60, 0x3c}, {&(0x7f0000000240)=""/208, 0xd0}, {&(0x7f0000000340)=""/75, 0x4b}, {&(0x7f00000003c0)=""/89, 0x59}, {&(0x7f0000000500)=""/129, 0x81}], 0x7, 0x4, 0x4) syz_emit_ethernet(0x46, &(0x7f00000008c0)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr=0x64010101, @local}, "a815a23da43974ff"}}}}}, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fffffffffffffff, 0x22400) ioctl$USBDEVFS_ALLOC_STREAMS(r7, 0x8008551c, &(0x7f00000005c0)={0x70ef, 0xa, [{0xf}, {0x4}, {}, {0xb}, {0xf}, {0x8}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0xa, 0x1}]}) write$tun(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[@ANYBLOB="0c320edbbf58ca440000aaaaaaaaaaaa86dd6001d55e00442901fe8000000000000000000000000000aaff0300400000000000000000000000010420880b0000000000000800000086dd080088be000000bbf43314d5dd2a5f7400100000000100000000000000080022eb000000002000000088ff000010000000000000"], 0x7e) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) pwritev2(r2, &(0x7f0000000200)=[{0x0}, {&(0x7f00000009c0)=']', 0x1}], 0x2, 0xfffffff7, 0xa, 0x1) 1.264793733s ago: executing program 4 (id=1402): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r0, &(0x7f0000003400)=[{&(0x7f0000001080)=""/107, 0x7ffff000}, {&(0x7f0000004c00)=""/4096, 0x1000}], 0x2) (fail_nth: 45) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000600)='./bus\x00', 0x0, &(0x7f00000002c0), 0xfe, 0x492, &(0x7f0000000f00)="$eJzs3M9rHFUcAPDvzG76U5tY64/WgtEqBn8kTdpqD3pQFDwoKHqox5ikpXbbSBPBlqKpSD1Kwbt4FPwLPHkS9SR48aB3KRQNQlsvrszuTJJdd2N+79b9fGDb93bezHvfzLydl/d2EkDPGsz+SSLuiIhfIqK/nm0sMFj/7+b8pYlb85cmkqhW3/g9qZW7MX9poiha7Lc7zwylEenHSV5Jo5kLF8+MVypT5/P8yOzZd0dmLlx86vTZ8VNTp6bOjR0/fvTI6DNPjx1r2O/YGuPM4rtx4IPpg/tffuvqqxMnrr79/VdZe9N8+9I4NspgFvgf1ZrmbY9udGUd9nd1Mc6k3OnWsFKliMhOV1+t//dHKRZPXn+89FFHGwdsquwze3v7zXNV4H8siU63AOiM4kaf/f6bv/q2aOjRFa4/X/8FKIv9Zv6qbykvzA1s5g9kMCJOzP31efaKpnmIaot5AwCA9fomG/882TD+y8cfady7pNyefG1oICLuioi9EXF3ROyLiHsiamXvi4j7V1LpjsVk89LQv9dh0mtrDm4FsvHfs/naVuP4rxj9xUApz91Zi78vOXm6MnU4/5kMRd/2LD/a6uDFIV786dN29S8d/2WvrP5iLJgf5Fq5aYJucnx2fKMGpdcvRxwot4o/WVgJSCJif0QcWN2h9xSJ049/ebBdof+OfxkbsM5U/SLisfr5n4um+AvJ8uuTIzuiMnV4pH5VlFrU8cOPV15rV/+64t8A2fnf1Xj9N5Xo/zNZul47s/o6rvz6Sdu11fIar/9tyZu1Nd1t+Xvvj8/Onh+N2Ja8Uss3vD+2uG+RL8pn8Q8dat3/9+b7ZPE/EBEHI34uut2D+bl7KCIejohDy8T/3QuPvNNuWzec/8mWn38L1/9A4/lffaJ05tuv29XfHH+S5xdLZOf/aC01lL9T+/zL7Wxz3PbNKW4+a72aAQAA4PaT1r4bn6TDC+k0HR6uf4d/X+xKK9Mzs0+cnH7v3GT9O/QD0ZcW85/9S+ZDR5O5/Ij1/Fg+V1xsP5LPG39W2pkkUZkanpiuTHY4duh1u9v0/8xvpca1msJzW95KYNN4Xgt6V3P/TzvUDmDruf9D79L/oXfp/9C7iv7/+pL3Pmwq0+qL7cDtz/0fepf+D71rof9f7mw7gK3n/g89qdVD8sXfOFjHI//rSpSXeXq/SxPF7Gi3tOdMEhGbW0Wk3RFp20Tkf8SiW9qz+sSt6hp3Ly/Tu1ea6MznEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwEb7JwAA//+34eUt") openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00'}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) pipe(&(0x7f00000000c0)) eventfd2(0x883, 0x80000) 891.002184ms ago: executing program 2 (id=1404): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='kmem_cache_free\x00', r3}, 0x10) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3b, 0x1, 0x0, 0x0, 0x0, 0x89, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/11], 0x48) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000380), 0x4}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40000, 0x7}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0xb) add_key(0x0, 0x0, &(0x7f0000000100)="01000000020000000000006b", 0xc, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r4 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x1], 0x1, [0x8, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x5], [0x0, 0x8, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}]}}]}, 0x8c}}, 0x800) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000a000000b703000000000000850000006d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000003c0)='signal_generate\x00', r7}, 0x40) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'geneve1\x00', 0x0}) sendto$packet(r8, &(0x7f00000002c0)="1441c05465f0006fc8afa8e40800", 0xe, 0x0, &(0x7f00000000c0)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r10, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$packet(0x11, 0xa, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r11, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) socket$key(0xf, 0x3, 0x2) 840.928925ms ago: executing program 6 (id=1405): setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000900)='veth0_virt_wifi\x00', 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) sendfile(r3, r3, 0x0, 0x548) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = io_uring_setup(0x30d1, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x3}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000001e00100000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000fcffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000880)=@gcm_256={{0x304}, '\x00', "376a31a11e8e279cec092f071cc80f218d360356a936a7e3971a8c35c47e580e", '\x00', "fffffffffffffffd"}, 0x38) write$binfmt_script(r6, &(0x7f0000001300), 0x8f) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe9d) close_range(r4, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000540)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff7ffa}]}) close_range(r7, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x24000000) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 786.954275ms ago: executing program 4 (id=1407): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000008000a20000000000a01010000000000000000020000000900010073797a30000000002c000000030a01010000000000000000020000000900010073797a30000000000900030073797a32000000003a000000030a03000000000000000000020000000900010073797a30000000000900030073797a32"], 0xa0}}, 0x8040) 770.348515ms ago: executing program 1 (id=1409): accept4$x25(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000480)={[{@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@data_err_ignore}]}, 0x3, 0x4c4, &(0x7f0000000780)="$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") (fail_nth: 22) 722.808585ms ago: executing program 6 (id=1410): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x10) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89101) mount_setattr(r1, &(0x7f0000001d80)='.\x00', 0x8800, &(0x7f0000001dc0)={0x0, 0x0, 0x80000}, 0x20) 524.433637ms ago: executing program 6 (id=1412): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) 499.416437ms ago: executing program 1 (id=1413): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async, rerun: 64) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000580)={'vcan0\x00', 0x0}) bind$can_raw(r3, &(0x7f0000000100)={0x1d, r4}, 0x10) (async) bind$can_raw(r3, &(0x7f0000000280), 0x10) (async, rerun: 32) r5 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) (rerun: 32) close_range(r5, 0xffffffffffffffff, 0x0) (async) pwritev2(r5, &(0x7f0000000480)=[{&(0x7f00000003c0)="baaa3336dfc0d3f572afba3622798d8371f92eaf47c81d13faab5e05f8b3a9b7522d4e08915ec177fb78a7474f73590c49b539382d400d3bf01dd9dfa04be2d9412c7f7eeca4e0e7ecb4506db3e13a76fe2b6db1ca382424fa73f27c3a183f68c0fd7ca20c6c4d771a29b65e355f4c83977c945e7b83fe145e1d3145afb0c707497464b6329fa30fd119f8ae353b5088690a06018b81ee6a57e253a1ba35a04b19d78d5e665a028117570f", 0xab}, {&(0x7f0000000100)="127a9bf3f8573edb6528a9813805d35a077c4bbe2d0d11c688b6f0c6fed85e75037f7405896602213bee3a0a1cdfa1e3bdc534310acc302c36b61735422be1ca67d99c811743741422884f8f31476a605a0589a2e8b17a062be3b62003a4", 0x5e}, {&(0x7f0000000580)="0d615f16a7ef0d9f267cedfb4b1946103ec653190f36088687b8d82bc3d4bb6d65835e01a0884e2b6bfae3b08732fefd029600a0a21d4e0372e16057e05f638ad2f06cf05032f107e9510e900f0bc9e99b866ad98d81286f55ea86455a4b897389750dda76d4bfa76990277fbdbaa206eda2057c36fe9f41a7f65f788d326d6790d7d1e490dbf64ebf1681ad32c9d8b19130ad355caa6e3568c67e520acb224a18bb8f5838521f727e0667208c17501d1e8d7ccb78aa9b6d9e8e5a1090708ec30fec0e687feda614826902e9ac95a799927f879025985b", 0xd7}, {&(0x7f0000000680)="6558a6eb59fbebb7722b68b5665ad2871ea31c441b0049e0c96148ea17effcf2e6133588e3af7e79e6d1cf13e67af97ae9790a10a26b8bde535cb1c6aa8c28ecd8e38fb48ca8b93982c6f6e2cc4d398392b630e5ea432b95e8d81d73b9a1549a07b1ba43b5ad1b0dc24256cfa454dc61721f8ebea60f457d23a2cf1005e77a990b45b288994c5b95b51a20569e3b6900498c3d0ef441c6b7c3166bd49637a2e2376ecf3014af4fa2db3daa760bda32c5d03f18d81446a8bc5650d134bbde3a", 0xbf}, {&(0x7f0000000740)="6113044eafbc9d5f0094cf9330dcb8fb8c220b8b0a16383164a4a0978da8bdc656eb64d3b59b21da47fba9afcbbbc0a0c04137950c8350c49b1f91b6e59b61b11fe7e630029d86881ca787c67a7f120712db8ca414c344d091c2b7e8722a97e33d7b56969c3cd920a0234f3f997e2aece78f8f5ffa3ca7f4e3959c9c6bbf79c1d8801421df9067ba5fd30199c63308b784737152dcea444ef6221983656ec5be98fa4cc3e0adac2c4c329542f1e3cb4f1c1a9eba36bdf673bd5dfb870bfc6417b8fc96b471a593cb91dcaf2b636895565ff899d713aeaec45029dd26f3422c0c60f97c59c424b8639fba00023185", 0xee}], 0x5, 0x68a, 0x70e, 0x4) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) (async) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x8}]}) unshare(0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r7, 0x40082104, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r8) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r9, 0x301, 0x0, 0x25dfdbfd, {0x24}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x80) 499.199427ms ago: executing program 4 (id=1414): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ff01000000000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) (fail_nth: 35) 498.959067ms ago: executing program 6 (id=1415): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070080000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000780)='mm_page_free\x00', r0}, 0x10) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000880)=""/4089, 0xff9}], 0x1}, 0xfffffffffffffff4) 443.044467ms ago: executing program 6 (id=1416): accept4$x25(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000480)={[{@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@data_err_ignore}]}, 0x3, 0x4c4, &(0x7f0000000780)="$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") 442.698418ms ago: executing program 5 (id=1418): r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x100) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r2}, 0x10) fcntl$setlease(r0, 0x400, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x300, 0xf5ff) 426.922158ms ago: executing program 5 (id=1419): socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x1f, &(0x7f0000000080)={@multicast, @empty, @void, {@llc_tr={0x11, {@snap={0xaa, 0x0, "0f", '~b^', 0x0, "00cfb759d0d50b000c"}}}}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = io_uring_setup(0x6479, &(0x7f00000001c0)={0x0, 0xfffffffd}) r2 = eventfd(0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000a80)=r2, 0x1) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, 0x0, 0x1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000003c0), 0x5, r0}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000200)='mm_page_free\x00', r3, 0x0, 0x2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)=@o_path={0x0}, 0x18) socket$inet6(0xa, 0x6, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x203f, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) setrlimit(0x9, &(0x7f0000000000)) io_setup(0x2004, &(0x7f0000000680)) 183.188969ms ago: executing program 2 (id=1420): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x3b, 0x1, 0x0, 0x0, 0x0, 0x89, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = creat(0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004"], 0xfe44, 0x0) 182.959089ms ago: executing program 1 (id=1421): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdir(&(0x7f0000002880)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 182.761069ms ago: executing program 4 (id=1422): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d0000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 176.501049ms ago: executing program 4 (id=1423): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="18060000ed0000000012000000000000950000cc7ab07a32"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x700}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 152.701269ms ago: executing program 4 (id=1424): getpid() r0 = gettid() timer_create(0x6, &(0x7f00000001c0)={0x0, 0x21, 0x2, @tid=r0}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000d00)='kmem_cache_free\x00', r1}, 0x18) r2 = syz_clone(0x400, &(0x7f0000000d40)="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", 0x1000, &(0x7f0000000200), &(0x7f0000000240), &(0x7f00000002c0)="e3fae3221dcf7a90adc1809760a32e943490842e91a0caaa0cfb0fb5c5c05d30bcb79fb4e9b1804210fd48d3f11afe79c5a53d82df69be88") getpgid(r2) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)="e9bed67a87ee4623d39c10780000000000000000", 0x14}}, 0x20040814) r4 = inotify_init() readv(r4, &(0x7f0000000180)=[{&(0x7f0000000680)=""/139, 0x8b}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 141.054669ms ago: executing program 1 (id=1425): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x6f4, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000600), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008bd6000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) setrlimit(0x9, &(0x7f0000000000)) io_setup(0x2004, &(0x7f0000000680)) 106.282899ms ago: executing program 2 (id=1426): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) 106.076799ms ago: executing program 5 (id=1427): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='cdg\x00', 0x4) listen(r0, 0x0) close(r0) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x20000000, &(0x7f0000000100)={0x77359400}) 103.998159ms ago: executing program 6 (id=1428): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r2) r4 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x0, 0x13100}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)={0x20, r8, 0x1, 0x0, 0xfffffffe, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x20}}, 0x40000) io_uring_enter(r4, 0x2def, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r4, 0x18, &(0x7f0000000140)={0x5, r4, 0x1c, {0x9, 0x1}, 0x6}, 0x1) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYRES16=r3, @ANYRES16=r3, @ANYRES8=r0, @ANYRES32=r1], 0x274}, 0x1, 0x0, 0x0, 0x4085}, 0x20000010) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r9}, 0x10) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) r11 = dup(r10) r12 = open(&(0x7f0000000000)='./bus\x00', 0x44542, 0x2) ftruncate(r12, 0xee72) sendfile(r11, r12, 0x0, 0x8000fffffffe) fcntl$dupfd(r11, 0x0, r12) read$usbmon(r12, &(0x7f0000000280)=""/139, 0x8b) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x1600) 103.718759ms ago: executing program 1 (id=1429): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0xc, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYRESOCT=r0, @ANYBLOB="578c6284de790da6a973815c4ee2c790270996c7ca499ecf5ad4f1c9e281a7df6865b9be209ccd68919f71cc70c79e3347cf589857b1b60896a0954217d5952e", @ANYRESHEX=r0], 0x0, 0x5af, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000380)='mm_page_alloc\x00', r1}, 0x10) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="00000102", 0xfffff, r2) 93.043509ms ago: executing program 2 (id=1430): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) pipe(&(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {@barrier}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@noquota}, {@nogrpid}, {@noauto_da_alloc}, {@mblk_io_submit}]}, 0x1, 0x56a, &(0x7f00000015c0)="$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") execve(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000003c0)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="600000000206050000000000fffff0000000000005000100060000000900020073797a32000000000500040000000000140007800800124000080000080008400000000014000300686173683a69702c706f72742c6970000500050002"], 0x60}, 0x1, 0x0, 0x0, 0x85}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000015c0)={0x0}, 0x10) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000100000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001c00000014000180080003000100000008000100", @ANYRES32=r6], 0x28}}, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) 27.052459ms ago: executing program 1 (id=1431): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x2, 0x6}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000000c0)={r1, 0x2, 0x6, @remote}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x401}, [@generic={0x6, 0x1, 0x3, 0x7, 0x45323f1d}]}, &(0x7f00000001c0)='GPL\x00', 0x7, 0x1000, &(0x7f0000000f40)=""/4096, 0x41000, 0x26, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x2, 0x10, 0x100, 0x7}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000280)=[{0x4, 0x1, 0x8, 0x9}, {0x4, 0x3, 0x3, 0x4}], 0x10, 0x4, @void, @value}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 26.9244ms ago: executing program 5 (id=1432): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) socket$xdp(0x2c, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = epoll_create1(0x0) ppoll(&(0x7f0000000140)=[{r1, 0x702}, {r2, 0x2031}, {r1, 0x2000}, {r0, 0x8051}], 0x4, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) 26.70505ms ago: executing program 5 (id=1433): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d0000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 0s ago: executing program 5 (id=1434): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="18060000ed0000000012000000000000950000cc"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x700}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) kernel console output (not intermixed with test programs): olio_gfp+0x3d1/0xd90 [ 78.972117][ T6471] shmem_write_begin+0xa2/0x180 [ 78.977006][ T6471] generic_perform_write+0x1a8/0x4a0 [ 78.982305][ T6471] shmem_file_write_iter+0xc2/0xe0 [ 78.987441][ T6471] vfs_write+0x77f/0x920 [ 78.991791][ T6471] ? handle_mm_fault+0x170a/0x2aa0 [ 78.996930][ T6471] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 79.002834][ T6471] ksys_write+0xe8/0x1b0 [ 79.007078][ T6471] __x64_sys_write+0x42/0x50 [ 79.011705][ T6471] x64_sys_call+0x287e/0x2dc0 [ 79.016419][ T6471] do_syscall_64+0xc9/0x1c0 [ 79.021033][ T6471] ? clear_bhb_loop+0x55/0xb0 [ 79.025724][ T6471] ? clear_bhb_loop+0x55/0xb0 [ 79.030400][ T6471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.036288][ T6471] RIP: 0033:0x7f9c539cd2ff [ 79.040700][ T6471] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 79.060305][ T6471] RSP: 002b:00007f9c52046df0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 79.068844][ T6471] RAX: ffffffffffffffda RBX: 0000000000200000 RCX: 00007f9c539cd2ff [ 79.076804][ T6471] RDX: 0000000000200000 RSI: 00007f9c49c27000 RDI: 0000000000000005 [ 79.084812][ T6471] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000b89 [ 79.092833][ T6471] R10: 00000000000003ce R11: 0000000000000293 R12: 0000000000000005 [ 79.100791][ T6471] R13: 00007f9c52046ef0 R14: 00007f9c52046eb0 R15: 00007f9c49c27000 [ 79.108852][ T6471] [ 79.117539][ T6465] bridge_slave_1: left allmulticast mode [ 79.123218][ T6465] bridge_slave_1: left promiscuous mode [ 79.128904][ T6465] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.161471][ T29] kauditd_printk_skb: 352 callbacks suppressed [ 79.161485][ T29] audit: type=1400 audit(1732383006.914:2701): avc: denied { mount } for pid=6478 comm="syz.4.847" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 79.161591][ T6476] loop2: detected capacity change from 0 to 4096 [ 79.204610][ T6465] bond0: (slave bond_slave_0): Releasing backup interface [ 79.213298][ T6474] ref_ctr_offset mismatch. inode: 0x21f offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x82 [ 79.245312][ T6479] loop4: detected capacity change from 0 to 512 [ 79.251846][ T6465] bond0: (slave bond_slave_1): Releasing backup interface [ 79.276161][ T6465] team0: Port device team_slave_0 removed [ 79.279494][ T6479] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 79.292073][ T6479] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 79.302139][ T6479] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm +}[@: Failed to acquire dquot type 1 [ 79.314216][ T6479] EXT4-fs (loop4): 1 truncate cleaned up [ 79.314896][ T6465] team0: Port device team_slave_1 removed [ 79.320387][ T6479] ext4 filesystem being mounted at /180/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.335461][ T6465] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.343627][ T6465] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.347734][ T29] audit: type=1400 audit(1732383007.114:2702): avc: denied { nlmsg_read } for pid=6478 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 79.367583][ T6486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.848'. [ 79.382325][ T6465] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.389839][ T6465] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.404923][ T6465] bond0: (slave geneve1): Releasing backup interface [ 79.415509][ T1033] vcan0 speed is unknown, defaulting to 1000 [ 79.446031][ T29] audit: type=1326 audit(1732383007.214:2703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6488 comm="syz.5.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08fa47e819 code=0x7ffc0000 [ 79.452019][ T6490] loop1: detected capacity change from 0 to 512 [ 79.469476][ T29] audit: type=1326 audit(1732383007.214:2704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6488 comm="syz.5.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f08fa47e819 code=0x7ffc0000 [ 79.498954][ T29] audit: type=1326 audit(1732383007.214:2705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6488 comm="syz.5.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08fa47e819 code=0x7ffc0000 [ 79.500976][ T6490] EXT4-fs: Ignoring removed bh option [ 79.522323][ T29] audit: type=1326 audit(1732383007.214:2706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6488 comm="syz.5.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f08fa47e819 code=0x7ffc0000 [ 79.551060][ T29] audit: type=1326 audit(1732383007.214:2707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6488 comm="syz.5.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08fa47e819 code=0x7ffc0000 [ 79.574407][ T29] audit: type=1326 audit(1732383007.214:2708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6488 comm="syz.5.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7f08fa47e819 code=0x7ffc0000 [ 79.587267][ T6490] EXT4-fs: inline encryption not supported [ 79.626031][ T6479] batadv_slave_1: entered promiscuous mode [ 79.635015][ T6479] batadv_slave_1: left promiscuous mode [ 79.684682][ T6490] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.849: corrupted in-inode xattr: invalid ea_ino [ 79.728588][ T6490] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.849: couldn't read orphan inode 15 (err -117) [ 79.810505][ T6511] syz.5.855[6511] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 79.810575][ T6511] syz.5.855[6511] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 79.824596][ T6511] syz.5.855[6511] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 79.889638][ T6511] vlan2: entered promiscuous mode [ 79.906075][ T6511] vlan2: entered allmulticast mode [ 79.925937][ T6511] bridge0: port 4(vlan2) entered blocking state [ 79.932249][ T6511] bridge0: port 4(vlan2) entered disabled state [ 80.019405][ T6536] 9pnet_fd: Insufficient options for proto=fd [ 80.056942][ T6542] loop5: detected capacity change from 0 to 512 [ 80.075847][ T6542] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 80.097469][ T6546] pim6reg: entered allmulticast mode [ 80.105797][ T6542] EXT4-fs (loop5): 1 truncate cleaned up [ 80.170865][ T6554] ref_ctr_offset mismatch. inode: 0x3d5 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x82 [ 80.425011][ T6576] pim6reg1: entered promiscuous mode [ 80.430368][ T6576] pim6reg1: entered allmulticast mode [ 80.515781][ T6574] veth0_to_team: entered promiscuous mode [ 80.521539][ T6574] veth0_to_team: entered allmulticast mode [ 80.570484][ T6584] FAULT_INJECTION: forcing a failure. [ 80.570484][ T6584] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 80.583856][ T6584] CPU: 1 UID: 0 PID: 6584 Comm: syz.5.865 Not tainted 6.12.0-syzkaller-07834-g06afb0f36106 #0 [ 80.594095][ T6584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 80.604139][ T6584] Call Trace: [ 80.607409][ T6584] [ 80.610365][ T6584] dump_stack_lvl+0xf2/0x150 [ 80.615013][ T6584] dump_stack+0x15/0x20 [ 80.619206][ T6584] should_fail_ex+0x223/0x230 [ 80.623878][ T6584] should_fail_alloc_page+0xfd/0x110 [ 80.629154][ T6584] __alloc_pages_noprof+0x109/0x340 [ 80.634431][ T6584] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 80.639863][ T6584] folio_alloc_noprof+0xee/0x130 [ 80.644820][ T6584] filemap_alloc_folio_noprof+0x69/0x220 [ 80.650508][ T6584] __filemap_get_folio+0x298/0x5b0 [ 80.655675][ T6584] ? should_failslab+0x8f/0xb0 [ 80.660484][ T6584] ? __kmalloc_noprof+0x165/0x370 [ 80.665505][ T6584] aio_setup_ring+0x263/0x6a0 [ 80.670246][ T6584] ioctx_alloc+0x2b2/0x4c0 [ 80.674742][ T6584] __se_sys_io_setup+0x6b/0x1b0 [ 80.679638][ T6584] __x64_sys_io_setup+0x31/0x40 [ 80.684484][ T6584] x64_sys_call+0x160f/0x2dc0 [ 80.689159][ T6584] do_syscall_64+0xc9/0x1c0 [ 80.693783][ T6584] ? clear_bhb_loop+0x55/0xb0 [ 80.698541][ T6584] ? clear_bhb_loop+0x55/0xb0 [ 80.703226][ T6584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.709172][ T6584] RIP: 0033:0x7f08fa47e819 [ 80.713578][ T6584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.733255][ T6584] RSP: 002b:00007f08f8af7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 80.741658][ T6584] RAX: ffffffffffffffda RBX: 00007f08fa635fa0 RCX: 00007f08fa47e819 [ 80.749620][ T6584] RDX: 0000000000000000 RSI: 0000000020000680 RDI: 0000000000002004 [ 80.757599][ T6584] RBP: 00007f08f8af7090 R08: 0000000000000000 R09: 0000000000000000 [ 80.765573][ T6584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 80.773534][ T6584] R13: 0000000000000000 R14: 00007f08fa635fa0 R15: 00007ffda89a3a68 [ 80.781567][ T6584] [ 80.903724][ T6590] loop4: detected capacity change from 0 to 512 [ 80.911539][ T6590] EXT4-fs: Ignoring removed i_version option [ 80.918284][ T6594] loop5: detected capacity change from 0 to 512 [ 80.942467][ T6590] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 80.944040][ T6594] EXT4-fs: inline encryption not supported [ 80.959636][ T6590] EXT4-fs error (device loop4): ext4_orphan_get:1389: inode #15: comm syz.4.868: iget: bad extra_isize 15 (inode size 256) [ 80.972618][ T6594] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 80.978946][ T6590] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.868: couldn't read orphan inode 15 (err -117) [ 80.981338][ T6594] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 81.005538][ T6594] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.870: bg 0: block 64: padding at end of block bitmap is not set [ 81.024009][ T6594] EXT4-fs (loop5): Remounting filesystem read-only [ 81.030902][ T6594] EXT4-fs (loop5): 1 truncate cleaned up [ 81.051643][ T6594] SELinux: (dev loop5, type ext4) getxattr errno 5 [ 81.087649][ T6601] vcan0 speed is unknown, defaulting to 1000 [ 81.174709][ T6608] syzkaller0: entered allmulticast mode [ 81.189382][ T6608] syzkaller0 (unregistering): left allmulticast mode [ 81.362266][ T6630] FAULT_INJECTION: forcing a failure. [ 81.362266][ T6630] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 81.375545][ T6630] CPU: 1 UID: 0 PID: 6630 Comm: syz.1.882 Not tainted 6.12.0-syzkaller-07834-g06afb0f36106 #0 [ 81.385794][ T6630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 81.395866][ T6630] Call Trace: [ 81.399134][ T6630] [ 81.402053][ T6630] dump_stack_lvl+0xf2/0x150 [ 81.406640][ T6630] dump_stack+0x15/0x20 [ 81.410874][ T6630] should_fail_ex+0x223/0x230 [ 81.415546][ T6630] should_fail_alloc_page+0xfd/0x110 [ 81.420818][ T6630] __alloc_pages_noprof+0x109/0x340 [ 81.426018][ T6630] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 81.431382][ T6630] alloc_pages_noprof+0xe1/0x100 [ 81.436311][ T6630] __pmd_alloc+0x4b/0x420 [ 81.440631][ T6630] copy_page_range+0x3721/0x3970 [ 81.445555][ T6630] ? kmem_cache_alloc_bulk_noprof+0x234/0x440 [ 81.451617][ T6630] ? mod_objcg_state+0x2ea/0x4f0 [ 81.456546][ T6630] ? mas_wr_walk_descend+0x359/0x410 [ 81.461824][ T6630] ? mas_wr_store_type+0x9a7/0xb70 [ 81.466939][ T6630] ? mas_store+0x520/0x720 [ 81.471348][ T6630] copy_mm+0x96c/0x10e0 [ 81.475502][ T6630] copy_process+0xd5b/0x1f90 [ 81.480088][ T6630] kernel_clone+0x167/0x5e0 [ 81.484582][ T6630] ? vfs_write+0x596/0x920 [ 81.488993][ T6630] __x64_sys_clone+0xe8/0x120 [ 81.493668][ T6630] x64_sys_call+0x2d7e/0x2dc0 [ 81.498337][ T6630] do_syscall_64+0xc9/0x1c0 [ 81.502829][ T6630] ? clear_bhb_loop+0x55/0xb0 [ 81.507501][ T6630] ? clear_bhb_loop+0x55/0xb0 [ 81.512167][ T6630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.518048][ T6630] RIP: 0033:0x7f1f1c04e819 [ 81.522449][ T6630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.542050][ T6630] RSP: 002b:00007f1f1a6c0fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 81.550450][ T6630] RAX: ffffffffffffffda RBX: 00007f1f1c205fa0 RCX: 00007f1f1c04e819 [ 81.558411][ T6630] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000048400 [ 81.566365][ T6630] RBP: 00007f1f1a6c1090 R08: 0000000000000000 R09: 0000000000000000 [ 81.574323][ T6630] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 81.582285][ T6630] R13: 0000000000000001 R14: 00007f1f1c205fa0 R15: 00007fff59d7b518 [ 81.590249][ T6630] [ 81.623976][ T6632] vcan0 speed is unknown, defaulting to 1000 [ 81.638709][ T6636] loop2: detected capacity change from 0 to 1024 [ 81.647185][ T6636] EXT4-fs: inline encryption not supported [ 81.659195][ T6639] loop1: detected capacity change from 0 to 128 [ 81.734762][ T6653] loop6: detected capacity change from 0 to 2048 [ 81.769918][ T6660] vcan0 speed is unknown, defaulting to 1000 [ 82.108815][ T6672] loop6: detected capacity change from 0 to 1024 [ 82.136968][ T6672] EXT4-fs: Ignoring removed oldalloc option [ 82.169764][ T6686] FAULT_INJECTION: forcing a failure. [ 82.169764][ T6686] name failslab, interval 1, probability 0, space 0, times 0 [ 82.182402][ T6686] CPU: 1 UID: 0 PID: 6686 Comm: syz.4.901 Not tainted 6.12.0-syzkaller-07834-g06afb0f36106 #0 [ 82.182822][ T6688] netlink: 'syz.2.897': attribute type 10 has an invalid length. [ 82.192633][ T6686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 82.210420][ T6686] Call Trace: [ 82.213709][ T6686] [ 82.216628][ T6686] dump_stack_lvl+0xf2/0x150 [ 82.221215][ T6686] dump_stack+0x15/0x20 [ 82.225374][ T6686] should_fail_ex+0x223/0x230 [ 82.230120][ T6686] ? skb_clone+0x154/0x1f0 [ 82.234544][ T6686] should_failslab+0x8f/0xb0 [ 82.239202][ T6686] kmem_cache_alloc_noprof+0x4c/0x290 [ 82.244659][ T6686] skb_clone+0x154/0x1f0 [ 82.248908][ T6686] pfkey_sendmsg+0x2de/0x970 [ 82.253569][ T6686] ? selinux_socket_sendmsg+0x185/0x1c0 [ 82.259107][ T6686] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 82.264249][ T6686] __sock_sendmsg+0x140/0x180 [ 82.268918][ T6686] ____sys_sendmsg+0x312/0x410 [ 82.273754][ T6686] __sys_sendmsg+0x19d/0x230 [ 82.278412][ T6686] __x64_sys_sendmsg+0x46/0x50 [ 82.283321][ T6686] x64_sys_call+0x2734/0x2dc0 [ 82.288062][ T6686] do_syscall_64+0xc9/0x1c0 [ 82.292557][ T6686] ? clear_bhb_loop+0x55/0xb0 [ 82.297274][ T6686] ? clear_bhb_loop+0x55/0xb0 [ 82.301940][ T6686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.307874][ T6686] RIP: 0033:0x7f9c539ce819 [ 82.312327][ T6686] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.331936][ T6686] RSP: 002b:00007f9c52047038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 82.340359][ T6686] RAX: ffffffffffffffda RBX: 00007f9c53b85fa0 RCX: 00007f9c539ce819 [ 82.348334][ T6686] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000004 [ 82.356412][ T6686] RBP: 00007f9c52047090 R08: 0000000000000000 R09: 0000000000000000 [ 82.364371][ T6686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.372329][ T6686] R13: 0000000000000000 R14: 00007f9c53b85fa0 R15: 00007fffe0c48238 [ 82.380295][ T6686] [ 82.386227][ T6682] ref_ctr_offset mismatch. inode: 0x428 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x82 [ 82.395676][ T6689] FAULT_INJECTION: forcing a failure. [ 82.395676][ T6689] name failslab, interval 1, probability 0, space 0, times 0 [ 82.409972][ T6689] CPU: 1 UID: 0 PID: 6689 Comm: syz.5.900 Not tainted 6.12.0-syzkaller-07834-g06afb0f36106 #0 [ 82.420270][ T6689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 82.430375][ T6689] Call Trace: [ 82.433639][ T6689] [ 82.436638][ T6689] dump_stack_lvl+0xf2/0x150 [ 82.441257][ T6689] dump_stack+0x15/0x20 [ 82.445429][ T6689] should_fail_ex+0x223/0x230 [ 82.450129][ T6689] ? vm_area_dup+0x98/0x130 [ 82.454621][ T6689] should_failslab+0x8f/0xb0 [ 82.459232][ T6689] kmem_cache_alloc_noprof+0x4c/0x290 [ 82.464598][ T6689] vm_area_dup+0x98/0x130 [ 82.468934][ T6689] __split_vma+0xf7/0x6a0 [ 82.473257][ T6689] vms_gather_munmap_vmas+0x2a9/0x7a0 [ 82.478626][ T6689] mmap_region+0x487/0x14a0 [ 82.483176][ T6689] do_mmap+0x718/0xb60 [ 82.487254][ T6689] vm_mmap_pgoff+0x133/0x290 [ 82.491887][ T6689] ksys_mmap_pgoff+0x286/0x330 [ 82.496643][ T6689] x64_sys_call+0x1940/0x2dc0 [ 82.501324][ T6689] do_syscall_64+0xc9/0x1c0 [ 82.505892][ T6689] ? clear_bhb_loop+0x55/0xb0 [ 82.510553][ T6689] ? clear_bhb_loop+0x55/0xb0 [ 82.515221][ T6689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.521174][ T6689] RIP: 0033:0x7f08fa47e819 [ 82.525570][ T6689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.545254][ T6689] RSP: 002b:00007f08f8af7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 82.553704][ T6689] RAX: ffffffffffffffda RBX: 00007f08fa635fa0 RCX: 00007f08fa47e819 [ 82.561674][ T6689] RDX: 0000000000000004 RSI: 0000000000003000 RDI: 0000000020002000 [ 82.569647][ T6689] RBP: 00007f08f8af7090 R08: 0000000000000004 R09: 0000000000000000 [ 82.577625][ T6689] R10: 0000000000012011 R11: 0000000000000246 R12: 0000000000000002 [ 82.585581][ T6689] R13: 0000000000000000 R14: 00007f08fa635fa0 R15: 00007ffda89a3a68 [ 82.593602][ T6689] [ 82.608597][ T6691] loop2: detected capacity change from 0 to 128 [ 82.633539][ T6688] veth0_vlan: left promiscuous mode [ 82.643055][ T6688] veth0_vlan: entered promiscuous mode [ 82.651490][ T6688] team0: Device veth0_vlan failed to register rx_handler [ 82.784797][ T6705] loop5: detected capacity change from 0 to 256 [ 82.803005][ T6703] 9pnet: Could not find request transport: 0xffffffffffffffff [ 82.813562][ T6709] loop1: detected capacity change from 0 to 512 [ 82.820645][ T6709] EXT4-fs (loop1): blocks per group (64) and clusters per group (20800) inconsistent [ 82.911786][ T6713] __nla_validate_parse: 6 callbacks suppressed [ 82.911801][ T6713] netlink: 12 bytes leftover after parsing attributes in process `syz.1.909'. [ 82.949587][ T6715] SELinux: syz.1.910 (6715) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 83.031371][ T6718] FAULT_INJECTION: forcing a failure. [ 83.031371][ T6718] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 83.044661][ T6718] CPU: 0 UID: 0 PID: 6718 Comm: syz.1.911 Not tainted 6.12.0-syzkaller-07834-g06afb0f36106 #0 [ 83.054904][ T6718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 83.064994][ T6718] Call Trace: [ 83.068340][ T6718] [ 83.071263][ T6718] dump_stack_lvl+0xf2/0x150 [ 83.075861][ T6718] dump_stack+0x15/0x20 [ 83.080087][ T6718] should_fail_ex+0x223/0x230 [ 83.084874][ T6718] should_fail_alloc_page+0xfd/0x110 [ 83.090160][ T6718] __alloc_pages_noprof+0x109/0x340 [ 83.095468][ T6718] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 83.100859][ T6718] alloc_pages_noprof+0xe1/0x100 [ 83.105810][ T6718] get_zeroed_page_noprof+0x17/0x40 [ 83.111091][ T6718] simple_transaction_get+0x4c/0x120 [ 83.116448][ T6718] selinux_transaction_write+0x86/0x100 [ 83.122019][ T6718] ? __pfx_selinux_transaction_write+0x10/0x10 [ 83.128247][ T6718] vfs_write+0x281/0x920 [ 83.132518][ T6718] ? putname+0xcf/0xf0 [ 83.136595][ T6718] ? __fget_files+0x17c/0x1c0 [ 83.141314][ T6718] ksys_write+0xe8/0x1b0 [ 83.145746][ T6718] __x64_sys_write+0x42/0x50 [ 83.150429][ T6718] x64_sys_call+0x287e/0x2dc0 [ 83.155203][ T6718] do_syscall_64+0xc9/0x1c0 [ 83.159795][ T6718] ? clear_bhb_loop+0x55/0xb0 [ 83.164486][ T6718] ? clear_bhb_loop+0x55/0xb0 [ 83.169285][ T6718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.175197][ T6718] RIP: 0033:0x7f1f1c04e819 [ 83.179651][ T6718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.199279][ T6718] RSP: 002b:00007f1f1a6a0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 83.207693][ T6718] RAX: ffffffffffffffda RBX: 00007f1f1c206080 RCX: 00007f1f1c04e819 [ 83.215661][ T6718] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 83.223637][ T6718] RBP: 00007f1f1a6a0090 R08: 0000000000000000 R09: 0000000000000000 [ 83.231608][ T6718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.239578][ T6718] R13: 0000000000000000 R14: 00007f1f1c206080 R15: 00007fff59d7b518 [ 83.247558][ T6718] [ 83.313118][ T6724] netlink: 24 bytes leftover after parsing attributes in process `syz.6.912'. [ 83.332982][ T6727] ref_ctr_offset mismatch. inode: 0x444 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x82 [ 83.374923][ T6735] pim6reg1: entered promiscuous mode [ 83.380249][ T6735] pim6reg1: entered allmulticast mode [ 83.428492][ T6742] netlink: 12 bytes leftover after parsing attributes in process `syz.5.920'. [ 83.472684][ T6746] FAULT_INJECTION: forcing a failure. [ 83.472684][ T6746] name failslab, interval 1, probability 0, space 0, times 0 [ 83.485370][ T6746] CPU: 1 UID: 0 PID: 6746 Comm: syz.5.922 Not tainted 6.12.0-syzkaller-07834-g06afb0f36106 #0 [ 83.495659][ T6746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 83.505719][ T6746] Call Trace: [ 83.508995][ T6746] [ 83.511929][ T6746] dump_stack_lvl+0xf2/0x150 [ 83.516566][ T6746] dump_stack+0x15/0x20 [ 83.520723][ T6746] should_fail_ex+0x223/0x230 [ 83.525403][ T6746] ? mas_alloc_nodes+0x1d3/0x4a0 [ 83.530449][ T6746] should_failslab+0x8f/0xb0 [ 83.535028][ T6746] kmem_cache_alloc_noprof+0x4c/0x290 [ 83.540476][ T6746] mas_alloc_nodes+0x1d3/0x4a0 [ 83.545242][ T6746] mas_preallocate+0x449/0x650 [ 83.550067][ T6746] __split_vma+0x244/0x6a0 [ 83.554488][ T6746] vms_gather_munmap_vmas+0x175/0x7a0 [ 83.559876][ T6746] ? mas_walk+0x204/0x320 [ 83.564258][ T6746] mmap_region+0x487/0x14a0 [ 83.568766][ T6746] do_mmap+0x718/0xb60 [ 83.572828][ T6746] vm_mmap_pgoff+0x133/0x290 [ 83.577414][ T6746] ksys_mmap_pgoff+0x286/0x330 [ 83.582239][ T6746] x64_sys_call+0x1940/0x2dc0 [ 83.586942][ T6746] do_syscall_64+0xc9/0x1c0 [ 83.591436][ T6746] ? clear_bhb_loop+0x55/0xb0 [ 83.596105][ T6746] ? clear_bhb_loop+0x55/0xb0 [ 83.600775][ T6746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.606688][ T6746] RIP: 0033:0x7f08fa47e819 [ 83.611093][ T6746] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.630754][ T6746] RSP: 002b:00007f08f8af7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 83.639218][ T6746] RAX: ffffffffffffffda RBX: 00007f08fa635fa0 RCX: 00007f08fa47e819 [ 83.647184][ T6746] RDX: 000000000000001e RSI: 0000000000003000 RDI: 0000000020002000 [ 83.655147][ T6746] RBP: 00007f08f8af7090 R08: 0000000000000008 R09: 0000000000000000 [ 83.663104][ T6746] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001 [ 83.671104][ T6746] R13: 0000000000000000 R14: 00007f08fa635fa0 R15: 00007ffda89a3a68 [ 83.679070][ T6746] [ 83.704806][ T6745] uprobe: syz.5.922:6745 failed to unregister, leaking uprobe [ 83.749071][ T6763] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 83.831477][ T6769] loop1: detected capacity change from 0 to 512 [ 83.838707][ T6771] serio: Serial port ptm0 [ 83.842563][ T6769] EXT4-fs: Ignoring removed i_version option [ 83.845263][ T6771] Cannot find map_set index 0 as target [ 83.855089][ T6769] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 83.867187][ T6769] EXT4-fs error (device loop1): ext4_orphan_get:1389: inode #15: comm syz.1.930: iget: bad extra_isize 15 (inode size 256) [ 83.872262][ T6777] netlink: 12 bytes leftover after parsing attributes in process `syz.5.933'. [ 83.880707][ T6769] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.930: couldn't read orphan inode 15 (err -117) [ 83.909214][ T6778] netlink: 36 bytes leftover after parsing attributes in process `syz.4.931'. [ 83.918204][ T6778] netlink: 36 bytes leftover after parsing attributes in process `syz.4.931'. [ 83.927495][ T6778] netlink: 36 bytes leftover after parsing attributes in process `syz.4.931'. [ 83.943238][ T6780] ref_ctr_offset mismatch. inode: 0x2ac offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x82 [ 84.046484][ T6793] netlink: 28 bytes leftover after parsing attributes in process `syz.4.940'. [ 84.050776][ T6791] loop5: detected capacity change from 0 to 1024 [ 84.063097][ T6791] EXT4-fs: Ignoring removed oldalloc option [ 84.077254][ T6791] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 84.087346][ T6799] IPVS: Error connecting to the multicast addr [ 84.102720][ T6791] EXT4-fs (loop5): shut down requested (0) [ 84.142015][ T6806] netlink: 12 bytes leftover after parsing attributes in process `syz.5.945'. [ 84.165806][ T29] kauditd_printk_skb: 10831 callbacks suppressed [ 84.165820][ T29] audit: type=1326 audit(1732383011.934:13538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6801 comm="syz.1.943" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f1f1c0457e7 code=0x0 [ 84.176110][ T6809] vcan0 speed is unknown, defaulting to 1000 [ 84.281296][ T29] audit: type=1400 audit(1732383012.044:13539): avc: denied { connect } for pid=6795 comm="syz.4.941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 84.410261][ T6813] loop5: detected capacity change from 0 to 512 [ 84.416993][ T6813] ext4: Bad value for 'journal_ioprio' [ 84.439605][ T6815] ref_ctr_offset mismatch. inode: 0x2d4 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x82 [ 84.556808][ T29] audit: type=1326 audit(1732383012.324:13540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6818 comm="syz.5.950" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f08fa47e819 code=0x0 [ 84.621489][ T6822] loop5: detected capacity change from 0 to 4096 [ 84.668574][ T6825] loop2: detected capacity change from 0 to 512 [ 84.675077][ T29] audit: type=1400 audit(1732383012.444:13541): avc: denied { mounton } for pid=6820 comm="syz.2.951" path="/209/file0" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 84.675767][ T6825] ext4: Unknown parameter 'dont_hash' [ 84.708273][ T6825] kernel profiling enabled (shift: 4) [ 84.708221][ T29] audit: type=1400 audit(1732383012.474:13542): avc: denied { write } for pid=6820 comm="syz.2.951" path="socket:[14975]" dev="sockfs" ino=14975 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 84.826282][ T3396] IPVS: starting estimator thread 0... [ 84.832047][ T6829] loop4: detected capacity change from 0 to 164 [ 84.839754][ T6829] Unsupported NM flag settings (8) [ 84.859790][ T6832] netlink: 8 bytes leftover after parsing attributes in process `syz.4.954'. [ 84.870855][ T6832] bridge0: entered promiscuous mode [ 84.876165][ T6832] macvlan1: entered promiscuous mode [ 84.913876][ T6830] IPVS: using max 2928 ests per chain, 146400 per kthread [ 84.930081][ T6838] loop4: detected capacity change from 0 to 512 [ 84.940298][ T29] audit: type=1400 audit(1732383012.704:13543): avc: denied { watch watch_reads } for pid=6837 comm="syz.4.957" path="/203/file0/file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 84.979988][ T29] audit: type=1326 audit(1732383012.744:13544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6840 comm="syz.4.958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c539ce819 code=0x7ffc0000 [ 85.004496][ T29] audit: type=1326 audit(1732383012.744:13545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6840 comm="syz.4.958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c539ce819 code=0x7ffc0000 [ 85.028019][ T29] audit: type=1326 audit(1732383012.744:13546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6840 comm="syz.4.958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7f9c539ce819 code=0x7ffc0000 [ 85.051355][ T29] audit: type=1326 audit(1732383012.744:13547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6840 comm="syz.4.958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c539ce819 code=0x7ffc0000 [ 85.090571][ T6843] xt_hashlimit: overflow, try lower: 18446744073709551614/7 [ 85.114470][ T6847] bond0: entered promiscuous mode [ 85.119533][ T6847] bond_slave_0: entered promiscuous mode [ 85.125327][ T6847] bond_slave_1: entered promiscuous mode [ 85.136972][ T6847] SELinux: Context system_u:object_r:crack_db_t:s0 is not valid (left unmapped). [ 85.146312][ T6843] Falling back ldisc for ttyS3. [ 85.170075][ T6852] FAULT_INJECTION: forcing a failure. [ 85.170075][ T6852] name failslab, interval 1, probability 0, space 0, times 0 [ 85.182834][ T6852] CPU: 0 UID: 0 PID: 6852 Comm: +}[@ Not tainted 6.12.0-syzkaller-07834-g06afb0f36106 #0 [ 85.192645][ T6852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 85.202688][ T6852] Call Trace: [ 85.205955][ T6852] [ 85.208869][ T6852] dump_stack_lvl+0xf2/0x150 [ 85.213451][ T6852] dump_stack+0x15/0x20 [ 85.217641][ T6852] should_fail_ex+0x223/0x230 [ 85.222323][ T6852] ? proc_reg_open+0x166/0x350 [ 85.227078][ T6852] should_failslab+0x8f/0xb0 [ 85.231681][ T6852] kmem_cache_alloc_noprof+0x4c/0x290 [ 85.237045][ T6852] proc_reg_open+0x166/0x350 [ 85.241676][ T6852] ? __pfx_proc_reg_open+0x10/0x10 [ 85.246778][ T6852] do_dentry_open+0x621/0xa20 [ 85.251554][ T6852] vfs_open+0x38/0x1f0 [ 85.255626][ T6852] path_openat+0x1ac2/0x1fa0 [ 85.260219][ T6852] do_filp_open+0x107/0x230 [ 85.264754][ T6852] ? __pfx_kfree_link+0x10/0x10 [ 85.269639][ T6852] do_sys_openat2+0xab/0x120 [ 85.274232][ T6852] __x64_sys_openat+0xf3/0x120 [ 85.278996][ T6852] x64_sys_call+0x2b30/0x2dc0 [ 85.283729][ T6852] do_syscall_64+0xc9/0x1c0 [ 85.288304][ T6852] ? clear_bhb_loop+0x55/0xb0 [ 85.292977][ T6852] ? clear_bhb_loop+0x55/0xb0 [ 85.297707][ T6852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.303583][ T6852] RIP: 0033:0x7f1f1c04d1b0 [ 85.307981][ T6852] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 19 8f 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 6c 8f 02 00 8b 44 [ 85.327708][ T6852] RSP: 002b:00007f1f1a6c0f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 85.336163][ T6852] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f1f1c04d1b0 [ 85.344117][ T6852] RDX: 0000000000000002 RSI: 00007f1f1a6c0fa0 RDI: 00000000ffffff9c [ 85.352134][ T6852] RBP: 00007f1f1a6c0fa0 R08: 0000000000000000 R09: 0000000000000000 [ 85.360087][ T6852] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 85.368040][ T6852] R13: 0000000000000000 R14: 00007f1f1c205fa0 R15: 00007fff59d7b518 [ 85.376008][ T6852] [ 85.394427][ T6854] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 85.420558][ T6861] loop1: detected capacity change from 0 to 128 [ 85.428426][ T6861] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 85.464584][ T6861] FAULT_INJECTION: forcing a failure. [ 85.464584][ T6861] name failslab, interval 1, probability 0, space 0, times 0 [ 85.477318][ T6861] CPU: 0 UID: 0 PID: 6861 Comm: syz.1.965 Not tainted 6.12.0-syzkaller-07834-g06afb0f36106 #0 [ 85.477906][ T6869] loop5: detected capacity change from 0 to 512 [ 85.487548][ T6861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 85.487561][ T6861] Call Trace: [ 85.487605][ T6861] [ 85.487612][ T6861] dump_stack_lvl+0xf2/0x150 [ 85.487637][ T6861] dump_stack+0x15/0x20 [ 85.518853][ T6861] should_fail_ex+0x223/0x230 [ 85.523652][ T6861] ? alloc_workqueue+0x858/0x1300 [ 85.528676][ T6861] should_failslab+0x8f/0xb0 [ 85.533254][ T6861] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 85.539151][ T6861] alloc_workqueue+0x858/0x1300 [ 85.544002][ T6861] sb_init_dio_done_wq+0x2b/0x80 [ 85.548942][ T6861] __blockdev_direct_IO+0x1de3/0x1e80 [ 85.554318][ T6861] ? __pfx_fat_get_block+0x10/0x10 [ 85.559435][ T6861] fat_direct_IO+0x10a/0x1d0 [ 85.564060][ T6861] generic_file_direct_write+0xf7/0x250 [ 85.569611][ T6861] __generic_file_write_iter+0xae/0x120 [ 85.575335][ T6861] generic_file_write_iter+0x77/0x1c0 [ 85.580746][ T6861] aio_write+0x2f7/0x420 [ 85.584982][ T6861] io_submit_one+0xb0c/0x1230 [ 85.589649][ T6861] __se_sys_io_submit+0xf5/0x280 [ 85.594587][ T6861] __x64_sys_io_submit+0x43/0x50 [ 85.599525][ T6861] x64_sys_call+0x2c20/0x2dc0 [ 85.604253][ T6861] do_syscall_64+0xc9/0x1c0 [ 85.608778][ T6861] ? clear_bhb_loop+0x55/0xb0 [ 85.613476][ T6861] ? clear_bhb_loop+0x55/0xb0 [ 85.618162][ T6861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.624051][ T6861] RIP: 0033:0x7f1f1c04e819 [ 85.628452][ T6861] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.648076][ T6861] RSP: 002b:00007f1f1a6c1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 85.656500][ T6861] RAX: ffffffffffffffda RBX: 00007f1f1c205fa0 RCX: 00007f1f1c04e819 [ 85.664467][ T6861] RDX: 0000000020000540 RSI: 000000000000003b RDI: 00007f1f1a698000 [ 85.672500][ T6861] RBP: 00007f1f1a6c1090 R08: 0000000000000000 R09: 0000000000000000 [ 85.680467][ T6861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.688501][ T6861] R13: 0000000000000000 R14: 00007f1f1c205fa0 R15: 00007fff59d7b518 [ 85.696566][ T6861] [ 85.724908][ T6869] EXT4-fs warning (device loop5): ext4_enable_quotas:7156: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 85.739521][ T6869] EXT4-fs (loop5): mount failed [ 85.763342][ T6882] loop5: detected capacity change from 0 to 512 [ 85.775883][ T6882] ext4 filesystem being mounted at /137/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 85.794648][ T11] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 85.886470][ T6901] loop2: detected capacity change from 0 to 512 [ 85.926468][ T6901] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e028, mo2=0002] [ 85.926539][ T6896] netlink: 'syz.4.978': attribute type 10 has an invalid length. [ 85.934896][ T6901] System zones: 1-12 [ 85.947505][ T6901] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.979: invalid indirect mapped block 8 (level 2) [ 85.948218][ T6896] team0: Device hsr_slave_0 failed to register rx_handler [ 85.971601][ T6901] EXT4-fs (loop2): Remounting filesystem read-only [ 85.991017][ T6901] EXT4-fs (loop2): 1 truncate cleaned up [ 85.998298][ T6901] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 86.059347][ T6910] hub 6-0:1.0: USB hub found [ 86.064133][ T6910] hub 6-0:1.0: 8 ports detected [ 86.076358][ T6910] syz.1.977[6910] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 86.076645][ T6910] syz.1.977[6910] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 86.088141][ T6910] syz.1.977[6910] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 86.103155][ T6910] loop1: detected capacity change from 0 to 256 [ 86.123946][ T6910] FAT-fs (loop1): IO charset cp860vC=|GYO=4a!iwD=iǚpoX`b씟RD$EvOZ74Đe'-m?@53.UٶS).--y -Z+e{6WoyLJ1@8%㇋GkQgd?wMVo+ not found [ 86.196902][ T6917] loop4: detected capacity change from 0 to 512 [ 86.206108][ T6917] EXT4-fs: Ignoring removed i_version option [ 86.212731][ T6917] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 86.245772][ T6917] EXT4-fs error (device loop4): ext4_orphan_get:1389: inode #15: comm syz.4.982: iget: bad extra_isize 15 (inode size 256) [ 86.261402][ T6917] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.982: couldn't read orphan inode 15 (err -117) [ 86.328681][ T6921] loop6: detected capacity change from 0 to 512 [ 86.347905][ T6921] EXT4-fs: Ignoring removed i_version option [ 86.355687][ T6921] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 86.368925][ T6921] EXT4-fs error (device loop6): ext4_orphan_get:1389: inode #15: comm syz.6.983: iget: bad extra_isize 15 (inode size 256) [ 86.383149][ T6921] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.983: couldn't read orphan inode 15 (err -117) [ 86.467330][ T6930] FAULT_INJECTION: forcing a failure. [ 86.467330][ T6930] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 86.480469][ T6930] CPU: 1 UID: 0 PID: 6930 Comm: syz.2.987 Not tainted 6.12.0-syzkaller-07834-g06afb0f36106 #0 [ 86.490765][ T6930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 86.500803][ T6930] Call Trace: [ 86.504064][ T6930] [ 86.506998][ T6930] dump_stack_lvl+0xf2/0x150 [ 86.511667][ T6930] dump_stack+0x15/0x20 [ 86.515811][ T6930] should_fail_ex+0x223/0x230 [ 86.520474][ T6930] should_fail+0xb/0x10 [ 86.524620][ T6930] should_fail_usercopy+0x1a/0x20 [ 86.529635][ T6930] copy_page_from_iter_atomic+0x228/0xf80 [ 86.535344][ T6930] ? shmem_write_begin+0xa2/0x180 [ 86.540375][ T6930] ? shmem_write_begin+0xda/0x180 [ 86.545390][ T6930] generic_perform_write+0x2f1/0x4a0 [ 86.550689][ T6930] shmem_file_write_iter+0xc2/0xe0 [ 86.555791][ T6930] vfs_write+0x77f/0x920 [ 86.560211][ T6930] ? handle_mm_fault+0x170a/0x2aa0 [ 86.565323][ T6930] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 86.571190][ T6930] ksys_write+0xe8/0x1b0 [ 86.575428][ T6930] __x64_sys_write+0x42/0x50 [ 86.580032][ T6930] x64_sys_call+0x287e/0x2dc0 [ 86.584761][ T6930] do_syscall_64+0xc9/0x1c0 [ 86.589273][ T6930] ? clear_bhb_loop+0x55/0xb0 [ 86.593982][ T6930] ? clear_bhb_loop+0x55/0xb0 [ 86.598757][ T6930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.604691][ T6930] RIP: 0033:0x7f5624a0d2ff [ 86.609096][ T6930] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 86.628727][ T6930] RSP: 002b:00007f5623086df0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 86.637205][ T6930] RAX: ffffffffffffffda RBX: 000000000005c000 RCX: 00007f5624a0d2ff [ 86.645168][ T6930] RDX: 000000000005c000 RSI: 00007f561ac67000 RDI: 0000000000000004 [ 86.653136][ T6930] RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000000005ac [ 86.661104][ T6930] R10: 0000000020002742 R11: 0000000000000293 R12: 0000000000000004 [ 86.669107][ T6930] R13: 00007f5623086ef0 R14: 00007f5623086eb0 R15: 00007f561ac67000 [ 86.677068][ T6930] [ 86.713077][ T6937] loop6: detected capacity change from 0 to 128 [ 86.724332][ T6930] loop2: detected capacity change from 0 to 736 [ 86.735362][ T6939] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6939 comm=syz.1.991 [ 86.754171][ T6937] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 86.775391][ T6945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.785118][ T6945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.804823][ T6949] loop4: detected capacity change from 0 to 512 [ 86.811557][ T6949] EXT4-fs: Ignoring removed i_version option [ 86.819940][ T6949] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 86.828493][ T6951] loop1: detected capacity change from 0 to 1024 [ 86.831137][ T6949] EXT4-fs error (device loop4): ext4_orphan_get:1389: inode #15: comm syz.4.994: iget: bad extra_isize 15 (inode size 256) [ 86.849550][ T6949] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.994: couldn't read orphan inode 15 (err -117) [ 86.970929][ T40] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 87.017317][ T6977] loop6: detected capacity change from 0 to 128 [ 87.144717][ T6986] loop1: detected capacity change from 0 to 512 [ 87.162872][ T6986] EXT4-fs: Ignoring removed i_version option [ 87.174541][ T6975] vcan0 speed is unknown, defaulting to 1000 [ 87.176488][ T6986] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 87.196853][ T6986] EXT4-fs error (device loop1): ext4_orphan_get:1389: inode #15: comm syz.1.1006: iget: bad extra_isize 15 (inode size 256) [ 87.228720][ T6986] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.1006: couldn't read orphan inode 15 (err -117) [ 87.877783][ T7006] loop2: detected capacity change from 0 to 128 [ 87.901277][ T7006] vfat: Unknown parameter 'syzkaller' [ 87.924033][ T7010] pim6reg1: entered promiscuous mode [ 87.929395][ T7010] pim6reg1: entered allmulticast mode [ 88.007902][ T7014] ref_ctr_offset mismatch. inode: 0x4b7 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x82 [ 88.238327][ T7030] syz.1.1027[7030] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.238559][ T7030] syz.1.1027[7030] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.271542][ T7030] syz.1.1027[7030] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.439521][ T7055] loop2: detected capacity change from 0 to 1024 [ 88.481378][ T7059] ref_ctr_offset mismatch. inode: 0x4d8 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x82 [ 88.519181][ T7055] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 88.544321][ T7055] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28 [ 88.556658][ T7055] EXT4-fs (loop2): This should not happen!! Data will be lost [ 88.556658][ T7055] [ 88.566339][ T7055] EXT4-fs (loop2): Total free blocks count 0 [ 88.572326][ T7055] EXT4-fs (loop2): Free/Dirty block details [ 88.578380][ T7055] EXT4-fs (loop2): free_blocks=68451041280 [ 88.584565][ T7055] EXT4-fs (loop2): dirty_blocks=64 [ 88.589692][ T7055] EXT4-fs (loop2): Block reservation details [ 88.596004][ T7055] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 88.601124][ T7070] loop5: detected capacity change from 0 to 128 [ 88.660073][ T7070] msdos: Unknown parameter 'WR&"~Wf#I O-' [ 88.697632][ T7076] loop2: detected capacity change from 0 to 512 [ 88.705616][ T7080] bond1: entered promiscuous mode [ 88.710696][ T7080] bond1: entered allmulticast mode [ 88.738224][ T7080] 8021q: adding VLAN 0 to HW filter on device bond1 [ 88.738995][ T7076] ext4 filesystem being mounted at /235/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.771603][ T7080] bond1 (unregistering): Released all slaves [ 88.829453][ T7070] vcan0 speed is unknown, defaulting to 1000 [ 88.858283][ T7076] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #19: comm syz.2.1044: corrupted inode contents [ 88.880525][ T7092] __nla_validate_parse: 6 callbacks suppressed [ 88.880592][ T7092] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1048'. [ 88.883856][ T7076] EXT4-fs error (device loop2): ext4_dirty_inode:6041: inode #19: comm syz.2.1044: mark_inode_dirty error [ 88.924920][ T7076] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #19: comm syz.2.1044: corrupted inode contents [ 88.950560][ T7076] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3006: inode #19: comm syz.2.1044: mark_inode_dirty error [ 88.989641][ T7076] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3009: inode #19: comm syz.2.1044: mark inode dirty (error -117) [ 89.012464][ T7076] EXT4-fs warning (device loop2): ext4_evict_inode:276: xattr delete (err -117) [ 89.074911][ T7100] xt_connbytes: Forcing CT accounting to be enabled [ 89.075858][ T7104] loop4: detected capacity change from 0 to 512 [ 89.094709][ T7100] Cannot find add_set index 0 as target [ 89.122736][ T7104] EXT4-fs: Ignoring removed i_version option [ 89.137761][ T7104] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 89.149678][ T7110] : renamed from bond0 (while UP) [ 89.165125][ T7104] EXT4-fs error (device loop4): ext4_orphan_get:1389: inode #15: comm syz.4.1053: iget: bad extra_isize 15 (inode size 256) [ 89.184929][ T7104] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.1053: couldn't read orphan inode 15 (err -117) [ 89.196897][ T29] kauditd_printk_skb: 464 callbacks suppressed [ 89.196910][ T29] audit: type=1326 audit(1732383016.954:14010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7069 comm="syz.5.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f08fa47e819 code=0x7ffc0000 [ 89.227026][ T29] audit: type=1326 audit(1732383016.954:14011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7069 comm="syz.5.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08fa47e819 code=0x7ffc0000 [ 89.250494][ T29] audit: type=1326 audit(1732383016.954:14012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7069 comm="syz.5.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f08fa47e819 code=0x7ffc0000 [ 89.273922][ T29] audit: type=1326 audit(1732383016.954:14013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7069 comm="syz.5.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08fa47e819 code=0x7ffc0000 [ 89.297464][ T29] audit: type=1326 audit(1732383016.954:14014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7069 comm="syz.5.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f08fa47e819 code=0x7ffc0000 [ 89.320990][ T29] audit: type=1326 audit(1732383016.954:14015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7069 comm="syz.5.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08fa47e819 code=0x7ffc0000 [ 89.344554][ T29] audit: type=1326 audit(1732383016.954:14016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7069 comm="syz.5.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f08fa47e819 code=0x7ffc0000 [ 89.367972][ T29] audit: type=1400 audit(1732383016.954:14017): avc: denied { setopt } for pid=7069 comm="syz.5.1042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 89.388089][ T29] audit: type=1326 audit(1732383016.954:14018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7069 comm="syz.5.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08fa47e819 code=0x7ffc0000 [ 89.412042][ T29] audit: type=1326 audit(1732383016.954:14019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7069 comm="syz.5.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f08fa47e819 code=0x7ffc0000 [ 89.490123][ T7113] tipc: Started in network mode [ 89.495046][ T7113] tipc: Node identity ac14140f, cluster identity 4711 [ 89.550506][ T7113] tipc: New replicast peer: 255.255.255.5 [ 89.556366][ T7113] tipc: Enabled bearer , priority 10 [ 89.565442][ T7126] vcan0 speed is unknown, defaulting to 1000 [ 89.739221][ T7129] FAULT_INJECTION: forcing a failure. [ 89.739221][ T7129] name failslab, interval 1, probability 0, space 0, times 0 [ 89.751966][ T7129] CPU: 1 UID: 0 PID: 7129 Comm: syz.4.1062 Not tainted 6.12.0-syzkaller-07834-g06afb0f36106 #0 [ 89.762384][ T7129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 89.772561][ T7129] Call Trace: [ 89.775831][ T7129] [ 89.778835][ T7129] dump_stack_lvl+0xf2/0x150 [ 89.783559][ T7129] dump_stack+0x15/0x20 [ 89.787781][ T7129] should_fail_ex+0x223/0x230 [ 89.792570][ T7129] ? audit_log_d_path+0x96/0x250 [ 89.797523][ T7129] should_failslab+0x8f/0xb0 [ 89.802216][ T7129] __kmalloc_cache_noprof+0x4b/0x2a0 [ 89.807508][ T7129] audit_log_d_path+0x96/0x250 [ 89.812358][ T7129] ? __rcu_read_unlock+0x4e/0x70 [ 89.817296][ T7129] audit_log_d_path_exe+0x42/0x70 [ 89.822335][ T7129] audit_log_task+0x155/0x180 [ 89.827027][ T7129] audit_seccomp+0x68/0x130 [ 89.831678][ T7129] __seccomp_filter+0x6fa/0x1180 [ 89.836624][ T7129] ? newseg+0x602/0x690 [ 89.840782][ T7129] ? up_write+0x30/0xf0 [ 89.844937][ T7129] ? ipcget+0x48d/0x4c0 [ 89.849094][ T7129] __secure_computing+0x9f/0x1c0 [ 89.854035][ T7129] syscall_trace_enter+0xd1/0x1f0 [ 89.859071][ T7129] do_syscall_64+0xaa/0x1c0 [ 89.863611][ T7129] ? clear_bhb_loop+0x55/0xb0 [ 89.868377][ T7129] ? clear_bhb_loop+0x55/0xb0 [ 89.870254][ T7130] loop5: detected capacity change from 0 to 512 [ 89.873055][ T7129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.884072][ T7130] EXT4-fs: Ignoring removed i_version option [ 89.885156][ T7129] RIP: 0033:0x7f9c539cd25c [ 89.895647][ T7129] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 89.907366][ T7130] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 89.915249][ T7129] RSP: 002b:00007f9c52047030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 89.915271][ T7129] RAX: ffffffffffffffda RBX: 00007f9c53b85fa0 RCX: 00007f9c539cd25c [ 89.915283][ T7129] RDX: 000000000000000f RSI: 00007f9c520470a0 RDI: 0000000000000006 [ 89.915295][ T7129] RBP: 00007f9c52047090 R08: 0000000000000000 R09: 0000000000000000 [ 89.957407][ T7129] R10: 000000002000e000 R11: 0000000000000246 R12: 0000000000000002 [ 89.965376][ T7129] R13: 0000000000000000 R14: 00007f9c53b85fa0 R15: 00007fffe0c48238 [ 89.973350][ T7129] [ 90.020132][ T7138] loop6: detected capacity change from 0 to 2048 [ 90.046387][ T7138] loop6: p1 p2 p3 < > p4 < p5 p6 > [ 90.048978][ T7130] EXT4-fs error (device loop5): ext4_orphan_get:1389: inode #15: comm syz.5.1061: iget: bad extra_isize 15 (inode size 256) [ 90.051610][ T7138] loop6: partition table partially beyond EOD, truncated [ 90.073950][ T7130] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.1061: couldn't read orphan inode 15 (err -117) [ 90.088453][ T7138] loop6: p1 size 33024 extends beyond EOD, truncated [ 90.115959][ T7138] loop6: p2 start 16908804 is beyond EOD, truncated [ 90.122727][ T7138] loop6: p3 start 4284289 is beyond EOD, truncated [ 90.147629][ T7138] loop6: p5 size 33024 extends beyond EOD, truncated [ 90.154996][ T7138] loop6: p6 start 16908804 is beyond EOD, truncated [ 90.171704][ T7138] binfmt_misc: register: failed to install interpreter file ./file0 [ 90.200832][ T7150] loop5: detected capacity change from 0 to 164 [ 90.221568][ T7150] Unable to read rock-ridge attributes [ 90.233511][ T7150] Unable to read rock-ridge attributes [ 90.261807][ T7158] vcan0 speed is unknown, defaulting to 1000 [ 90.290169][ C1] hrtimer: interrupt took 33938 ns [ 90.302400][ T7161] loop1: detected capacity change from 0 to 512 [ 90.309928][ T7161] EXT4-fs: Ignoring removed i_version option [ 90.317292][ T7161] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 90.339382][ T7161] EXT4-fs error (device loop1): ext4_orphan_get:1389: inode #15: comm syz.1.1075: iget: bad extra_isize 15 (inode size 256) [ 90.352589][ T7161] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.1075: couldn't read orphan inode 15 (err -117) [ 90.432687][ T7176] pim6reg1: entered promiscuous mode [ 90.438176][ T7176] pim6reg1: entered allmulticast mode [ 90.476526][ T7182] mmap: syz.5.1084 (7182): VmData 167489536 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 90.481322][ T7180] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1083'. [ 90.673609][ T7213] pim6reg1: entered promiscuous mode [ 90.679073][ T7213] pim6reg1: entered allmulticast mode [ 90.684725][ T3378] tipc: Node number set to 2886997007 [ 90.691051][ T7220] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1099'. [ 90.702053][ T7211] loop4: detected capacity change from 0 to 164 [ 90.744045][ T7227] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1101'. [ 90.748428][ T7228] FAULT_INJECTION: forcing a failure. [ 90.748428][ T7228] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 90.766587][ T7228] CPU: 1 UID: 0 PID: 7228 Comm: syz.5.1102 Not tainted 6.12.0-syzkaller-07834-g06afb0f36106 #0 [ 90.776918][ T7228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 90.786971][ T7228] Call Trace: [ 90.790241][ T7228] [ 90.793165][ T7228] dump_stack_lvl+0xf2/0x150 [ 90.797752][ T7228] dump_stack+0x15/0x20 [ 90.801897][ T7228] should_fail_ex+0x223/0x230 [ 90.806568][ T7228] should_fail_alloc_page+0xfd/0x110 [ 90.811843][ T7228] __alloc_pages_noprof+0x109/0x340 [ 90.817041][ T7228] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 90.822407][ T7228] alloc_pages_noprof+0xe1/0x100 [ 90.827336][ T7228] pte_alloc_one+0x31/0x110 [ 90.831829][ T7228] __pte_alloc+0x33/0x2a0 [ 90.836146][ T7228] copy_page_range+0x33f1/0x3970 [ 90.841076][ T7228] ? mod_objcg_state+0x2ea/0x4f0 [ 90.846011][ T7228] ? mas_wr_walk_descend+0x359/0x410 [ 90.851300][ T7228] copy_mm+0x96c/0x10e0 [ 90.855449][ T7228] copy_process+0xd5b/0x1f90 [ 90.860034][ T7228] kernel_clone+0x167/0x5e0 [ 90.864539][ T7228] __se_sys_clone3+0x1ba/0x200 [ 90.869301][ T7228] __x64_sys_clone3+0x31/0x40 [ 90.873970][ T7228] x64_sys_call+0x2d56/0x2dc0 [ 90.878638][ T7228] do_syscall_64+0xc9/0x1c0 [ 90.883138][ T7228] ? clear_bhb_loop+0x55/0xb0 [ 90.887804][ T7228] ? clear_bhb_loop+0x55/0xb0 [ 90.892472][ T7228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.898355][ T7228] RIP: 0033:0x7f08fa47e819 [ 90.902760][ T7228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.922356][ T7228] RSP: 002b:00007f08f8af6f08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 90.930759][ T7228] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f08fa47e819 [ 90.938719][ T7228] RDX: 00007f08f8af6f20 RSI: 0000000000000058 RDI: 00007f08f8af6f20 [ 90.946678][ T7228] RBP: 00007f08f8af7090 R08: 0000000000000000 R09: 0000000000000058 [ 90.954638][ T7228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 90.962596][ T7228] R13: 0000000000000000 R14: 00007f08fa635fa0 R15: 00007ffda89a3a68 [ 90.970560][ T7228] [ 90.986837][ T7232] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1104'. [ 91.007701][ T7234] loop2: detected capacity change from 0 to 128 [ 91.022942][ T7232] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1104'. [ 91.034259][ T7234] ext4 filesystem being mounted at /246/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 91.103944][ T7247] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1111'. [ 91.108506][ T7250] loop6: detected capacity change from 0 to 512 [ 91.125321][ T7250] ext4 filesystem being mounted at /90/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 91.150376][ T7256] syzkaller0: entered allmulticast mode [ 91.163223][ T7256] syzkaller0 (unregistering): left allmulticast mode [ 91.176785][ T7258] FAULT_INJECTION: forcing a failure. [ 91.176785][ T7258] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 91.189901][ T7258] CPU: 1 UID: 0 PID: 7258 Comm: syz.2.1114 Not tainted 6.12.0-syzkaller-07834-g06afb0f36106 #0 [ 91.200240][ T7258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 91.210296][ T7258] Call Trace: [ 91.213564][ T7258] [ 91.216480][ T7258] dump_stack_lvl+0xf2/0x150 [ 91.221061][ T7258] dump_stack+0x15/0x20 [ 91.225205][ T7258] should_fail_ex+0x223/0x230 [ 91.229954][ T7258] should_fail+0xb/0x10 [ 91.234158][ T7258] should_fail_usercopy+0x1a/0x20 [ 91.239176][ T7258] _copy_to_iter+0x248/0xd00 [ 91.243750][ T7258] ? down_read+0x171/0x4b0 [ 91.248246][ T7258] copy_page_to_iter+0x171/0x2b0 [ 91.253170][ T7258] process_vm_rw+0x5f0/0x8c0 [ 91.257844][ T7258] ? ksys_write+0x176/0x1b0 [ 91.262351][ T7258] __x64_sys_process_vm_readv+0x7a/0x90 [ 91.267899][ T7258] x64_sys_call+0xb24/0x2dc0 [ 91.272540][ T7258] do_syscall_64+0xc9/0x1c0 [ 91.277028][ T7258] ? clear_bhb_loop+0x55/0xb0 [ 91.281693][ T7258] ? clear_bhb_loop+0x55/0xb0 [ 91.286355][ T7258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.292238][ T7258] RIP: 0033:0x7f5624a0e819 [ 91.296648][ T7258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.316287][ T7258] RSP: 002b:00007f5623087038 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 91.324682][ T7258] RAX: ffffffffffffffda RBX: 00007f5624bc5fa0 RCX: 00007f5624a0e819 [ 91.332730][ T7258] RDX: 0000000000000002 RSI: 0000000020008400 RDI: 000000000000025e [ 91.340683][ T7258] RBP: 00007f5623087090 R08: 0000000000000286 R09: 0000000000000000 [ 91.348694][ T7258] R10: 0000000020008640 R11: 0000000000000246 R12: 0000000000000002 [ 91.356650][ T7258] R13: 0000000000000000 R14: 00007f5624bc5fa0 R15: 00007ffd6622a738 [ 91.364660][ T7258] [ 91.410905][ T7268] loop4: detected capacity change from 0 to 512 [ 91.417700][ T7268] journal_path: Non-blockdev passed as './file1' [ 91.424096][ T7268] EXT4-fs: error: could not find journal device path [ 91.432299][ T7272] FAULT_INJECTION: forcing a failure. [ 91.432299][ T7272] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 91.435705][ T7270] Cannot find del_set index 0 as target [ 91.445600][ T7272] CPU: 1 UID: 0 PID: 7272 Comm: syz.6.1121 Not tainted 6.12.0-syzkaller-07834-g06afb0f36106 #0 [ 91.461367][ T7272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 91.471500][ T7272] Call Trace: [ 91.474773][ T7272] [ 91.477689][ T7272] dump_stack_lvl+0xf2/0x150 [ 91.482339][ T7272] dump_stack+0x15/0x20 [ 91.486485][ T7272] should_fail_ex+0x223/0x230 [ 91.489314][ T7275] loop4: detected capacity change from 0 to 1024 [ 91.491200][ T7272] should_fail_alloc_page+0xfd/0x110 [ 91.500647][ T7275] EXT4-fs: Ignoring removed mblk_io_submit option [ 91.502773][ T7272] __alloc_pages_noprof+0x109/0x340 [ 91.502899][ T7272] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 91.519868][ T7272] vma_alloc_folio_noprof+0x1a0/0x2f0 [ 91.525251][ T7272] handle_mm_fault+0xdbe/0x2aa0 [ 91.530121][ T7272] ? __rcu_read_lock+0x36/0x50 [ 91.534908][ T7272] __get_user_pages+0xf2c/0x2670 [ 91.539844][ T7272] __gup_longterm_locked+0x2ea/0xf90 [ 91.545162][ T7272] ? try_get_folio+0x36c/0x3c0 [ 91.549995][ T7272] gup_fast_fallback+0x1568/0x2010 [ 91.555139][ T7272] pin_user_pages_fast+0x5f/0x90 [ 91.555170][ T7272] io_pin_pages+0x8c/0x140 [ 91.555245][ T7272] __io_uaddr_map+0x81/0x160 [ 91.555264][ T7272] io_allocate_scq_urings+0x145/0x2f0 [ 91.555295][ T7272] io_uring_create+0x42c/0x6d0 [ 91.555324][ T7272] __se_sys_io_uring_setup+0x1d2/0x1e0 [ 91.555392][ T7272] __x64_sys_io_uring_setup+0x31/0x40 [ 91.555469][ T7272] x64_sys_call+0x270c/0x2dc0 [ 91.555492][ T7272] do_syscall_64+0xc9/0x1c0 [ 91.555562][ T7272] ? clear_bhb_loop+0x55/0xb0 [ 91.555583][ T7272] ? clear_bhb_loop+0x55/0xb0 [ 91.555603][ T7272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.555626][ T7272] RIP: 0033:0x7f14e817e819 [ 91.555640][ T7272] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.555703][ T7272] RSP: 002b:00007f14e67f0fc8 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 91.555720][ T7272] RAX: ffffffffffffffda RBX: 00007f14e8335fa0 RCX: 00007f14e817e819 [ 91.555732][ T7272] RDX: 0000000000000000 RSI: 0000000020000400 RDI: 0000000000002c0c [ 91.555744][ T7272] RBP: 0000000020000400 R08: 0000000000000000 R09: 0000000000000000 [ 91.555757][ T7272] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 91.555830][ T7272] R13: 0000000000000000 R14: 0000000000002c0c R15: 0000000000000000 [ 91.555847][ T7272] [ 91.603223][ T7279] loop2: detected capacity change from 0 to 2048 [ 91.706377][ T7282] loop6: detected capacity change from 0 to 256 [ 91.776301][ T7282] FAT-fs (loop6): Directory bread(block 64) failed [ 91.782946][ T7282] FAT-fs (loop6): Directory bread(block 65) failed [ 91.790010][ T7282] FAT-fs (loop6): Directory bread(block 66) failed [ 91.798387][ T7282] FAT-fs (loop6): Directory bread(block 67) failed [ 91.805803][ T7282] FAT-fs (loop6): Directory bread(block 68) failed [ 91.812349][ T7282] FAT-fs (loop6): Directory bread(block 69) failed [ 91.821573][ T7282] FAT-fs (loop6): Directory bread(block 70) failed [ 91.828578][ T7282] FAT-fs (loop6): Directory bread(block 71) failed [ 91.835145][ T7282] FAT-fs (loop6): Directory bread(block 72) failed [ 91.841713][ T7282] FAT-fs (loop6): Directory bread(block 73) failed [ 91.845350][ T7300] loop1: detected capacity change from 0 to 512 [ 91.880822][ T7300] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 91.884978][ T7303] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.893776][ T7300] EXT4-fs (loop1): orphan cleanup on readonly fs [ 91.902756][ T7303] batadv_slave_0: entered promiscuous mode [ 91.917265][ T7300] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.1130: Failed to acquire dquot type 1 [ 91.939535][ T7300] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1130: bg 0: block 40: padding at end of block bitmap is not set [ 91.955156][ T7300] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 91.964243][ T7300] EXT4-fs (loop1): 1 truncate cleaned up [ 92.211417][ T7319] hub 6-0:1.0: USB hub found [ 92.216142][ T7319] hub 6-0:1.0: 8 ports detected [ 92.229302][ T7319] syz.1.1135[7319] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 92.229362][ T7319] syz.1.1135[7319] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 92.240922][ T7319] syz.1.1135[7319] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 92.257520][ T7319] loop1: detected capacity change from 0 to 256 [ 92.306617][ T7319] FAT-fs (loop1): IO charset cp860vC=|GYO=4a!iwD=iǚpoX`b씟RD$EvOZ74Đe'-m?@53.UٶS).--y -Z+e{6WoyLJ1@8%㇋GkQgd?wMVo+ not found [ 92.402639][ T7325] loop2: detected capacity change from 0 to 128 [ 92.465630][ T7325] syz.2.1140: attempt to access beyond end of device [ 92.465630][ T7325] loop2: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 92.489400][ T7325] syz.2.1140: attempt to access beyond end of device [ 92.489400][ T7325] loop2: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 92.490942][ T7330] FAULT_INJECTION: forcing a failure. [ 92.490942][ T7330] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 92.504460][ T7325] syz.2.1140: attempt to access beyond end of device [ 92.504460][ T7325] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 92.516477][ T7330] CPU: 1 UID: 0 PID: 7330 Comm: syz.4.1138 Not tainted 6.12.0-syzkaller-07834-g06afb0f36106 #0 [ 92.530717][ T7325] syz.2.1140: attempt to access beyond end of device [ 92.530717][ T7325] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 92.539865][ T7330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 92.539879][ T7330] Call Trace: [ 92.539886][ T7330] [ 92.539893][ T7330] dump_stack_lvl+0xf2/0x150 [ 92.539923][ T7330] dump_stack+0x15/0x20 [ 92.554496][ T7325] syz.2.1140: attempt to access beyond end of device [ 92.554496][ T7325] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 92.563029][ T7330] should_fail_ex+0x223/0x230 [ 92.569373][ T7325] syz.2.1140: attempt to access beyond end of device [ 92.569373][ T7325] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 92.573791][ T7330] should_fail_alloc_page+0xfd/0x110 [ 92.573815][ T7330] __alloc_pages_noprof+0x109/0x340 [ 92.619615][ T7330] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 92.624996][ T7330] folio_alloc_mpol_noprof+0x36/0x70 [ 92.630427][ T7330] shmem_get_folio_gfp+0x3d1/0xd90 [ 92.635620][ T7330] shmem_write_begin+0xa2/0x180 [ 92.640526][ T7330] generic_perform_write+0x1a8/0x4a0 [ 92.645809][ T7330] shmem_file_write_iter+0xc2/0xe0 [ 92.650915][ T7330] vfs_write+0x77f/0x920 [ 92.655212][ T7330] ? handle_mm_fault+0x170a/0x2aa0 [ 92.660306][ T7330] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 92.666106][ T7330] ksys_write+0xe8/0x1b0 [ 92.670372][ T7330] __x64_sys_write+0x42/0x50 [ 92.675048][ T7330] x64_sys_call+0x287e/0x2dc0 [ 92.679749][ T7330] do_syscall_64+0xc9/0x1c0 [ 92.684320][ T7330] ? clear_bhb_loop+0x55/0xb0 [ 92.689022][ T7330] ? clear_bhb_loop+0x55/0xb0 [ 92.693772][ T7330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.699676][ T7330] RIP: 0033:0x7f9c539cd2ff [ 92.704073][ T7330] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 92.723725][ T7330] RSP: 002b:00007f9c52046df0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 92.732182][ T7330] RAX: ffffffffffffffda RBX: 0000000000040000 RCX: 00007f9c539cd2ff [ 92.740140][ T7330] RDX: 0000000000040000 RSI: 00007f9c49c27000 RDI: 0000000000000004 [ 92.748105][ T7330] RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000000004e8 [ 92.756064][ T7330] R10: 00000000000007cc R11: 0000000000000293 R12: 0000000000000004 [ 92.764097][ T7330] R13: 00007f9c52046ef0 R14: 00007f9c52046eb0 R15: 00007f9c49c27000 [ 92.772115][ T7330] [ 92.806401][ T7336] loop4: detected capacity change from 0 to 2048 [ 92.828730][ T7342] netlink: 12 bytes leftover after parsing attributes in process `&/'. [ 93.024489][ T7355] IPv6: Can't replace route, no match found [ 93.118245][ T7376] FAULT_INJECTION: forcing a failure. [ 93.118245][ T7376] name failslab, interval 1, probability 0, space 0, times 0 [ 93.130979][ T7376] CPU: 0 UID: 0 PID: 7376 Comm: syz.4.1157 Not tainted 6.12.0-syzkaller-07834-g06afb0f36106 #0 [ 93.141311][ T7376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 93.151386][ T7376] Call Trace: [ 93.154811][ T7376] [ 93.157738][ T7376] dump_stack_lvl+0xf2/0x150 [ 93.162345][ T7376] dump_stack+0x15/0x20 [ 93.166492][ T7376] should_fail_ex+0x223/0x230 [ 93.171160][ T7376] ? __kernfs_new_node+0x6a/0x380 [ 93.176199][ T7376] should_failslab+0x8f/0xb0 [ 93.180779][ T7376] kmem_cache_alloc_noprof+0x4c/0x290 [ 93.186142][ T7376] __kernfs_new_node+0x6a/0x380 [ 93.191048][ T7376] ? rb_insert_color+0x263/0x290 [ 93.196021][ T7376] ? up_write+0x30/0xf0 [ 93.200184][ T7376] ? kernfs_activate+0x256/0x270 [ 93.205131][ T7376] kernfs_new_node+0xc8/0x140 [ 93.209826][ T7376] __kernfs_create_file+0x49/0x180 [ 93.214949][ T7376] ? __pfx_dev_attr_store+0x10/0x10 [ 93.220200][ T7376] sysfs_add_file_mode_ns+0x136/0x1c0 [ 93.225774][ T7376] internal_create_group+0x464/0x9b0 [ 93.231118][ T7376] sysfs_create_groups+0x3c/0xe0 [ 93.236105][ T7376] device_add_attrs+0x69/0x400 [ 93.240895][ T7376] ? kobject_put+0x10a/0x180 [ 93.245577][ T7376] device_add+0x38d/0x790 [ 93.249935][ T7376] netdev_register_kobject+0x100/0x230 [ 93.255402][ T7376] register_netdevice+0x910/0xe30 [ 93.260434][ T7376] tun_set_iff+0x5d4/0x810 [ 93.264886][ T7376] __tun_chr_ioctl+0x64c/0x1860 [ 93.269727][ T7376] tun_chr_ioctl+0x27/0x30 [ 93.274138][ T7376] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 93.279253][ T7376] __se_sys_ioctl+0xc9/0x140 [ 93.283837][ T7376] __x64_sys_ioctl+0x43/0x50 [ 93.288429][ T7376] x64_sys_call+0x1690/0x2dc0 [ 93.293117][ T7376] do_syscall_64+0xc9/0x1c0 [ 93.297614][ T7376] ? clear_bhb_loop+0x55/0xb0 [ 93.302292][ T7376] ? clear_bhb_loop+0x55/0xb0 [ 93.306970][ T7376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.312949][ T7376] RIP: 0033:0x7f9c539ce819 [ 93.317359][ T7376] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.337110][ T7376] RSP: 002b:00007f9c52047038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 93.345697][ T7376] RAX: ffffffffffffffda RBX: 00007f9c53b85fa0 RCX: 00007f9c539ce819 [ 93.353655][ T7376] RDX: 0000000020000080 RSI: 00000000400454ca RDI: 0000000000000004 [ 93.361749][ T7376] RBP: 00007f9c52047090 R08: 0000000000000000 R09: 0000000000000000 [ 93.369717][ T7376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 93.377680][ T7376] R13: 0000000000000000 R14: 00007f9c53b85fa0 R15: 00007fffe0c48238 [ 93.385697][ T7376] [ 93.480843][ T7391] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1163'. [ 93.492137][ T7391] hsr_slave_0: left promiscuous mode [ 93.497987][ T7391] hsr_slave_1: left promiscuous mode [ 93.630327][ T7406] loop2: detected capacity change from 0 to 512 [ 93.702211][ T7415] program syz.5.1169 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 93.728177][ T7417] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1170'. [ 93.740972][ T7417] team0 (unregistering): Port device team_slave_0 removed [ 93.749968][ T7417] team0 (unregistering): Port device team_slave_1 removed [ 93.831425][ T7423] loop6: detected capacity change from 0 to 2048 [ 93.988495][ T7437] __nla_validate_parse: 1 callbacks suppressed [ 93.988510][ T7437] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1177'. [ 94.029585][ T7440] loop5: detected capacity change from 0 to 764 [ 94.043431][ T7440] FAULT_INJECTION: forcing a failure. [ 94.043431][ T7440] name failslab, interval 1, probability 0, space 0, times 0 [ 94.056160][ T7440] CPU: 1 UID: 0 PID: 7440 Comm: syz.5.1178 Not tainted 6.12.0-syzkaller-07834-g06afb0f36106 #0 [ 94.066484][ T7440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 94.076579][ T7440] Call Trace: [ 94.079841][ T7440] [ 94.082758][ T7440] dump_stack_lvl+0xf2/0x150 [ 94.087420][ T7440] dump_stack+0x15/0x20 [ 94.091609][ T7440] should_fail_ex+0x223/0x230 [ 94.096268][ T7440] ? __kvmalloc_node_noprof+0x72/0x170 [ 94.101795][ T7440] should_failslab+0x8f/0xb0 [ 94.106386][ T7440] __kmalloc_node_noprof+0xa8/0x380 [ 94.111654][ T7440] __kvmalloc_node_noprof+0x72/0x170 [ 94.116940][ T7440] pfifo_fast_init+0x25e/0x360 [ 94.121737][ T7440] qdisc_create_dflt+0xce/0x280 [ 94.126590][ T7440] mq_init+0x1b9/0x380 [ 94.130712][ T7440] qdisc_create_dflt+0xce/0x280 [ 94.135673][ T7440] dev_activate+0xd9/0x9e0 [ 94.140124][ T7440] ? dev_set_rx_mode+0x189/0x1a0 [ 94.145105][ T7440] __dev_open+0x263/0x2e0 [ 94.149487][ T7440] __dev_change_flags+0x155/0x410 [ 94.154588][ T7440] dev_change_flags+0x59/0xd0 [ 94.159307][ T7440] dev_ifsioc+0x67f/0xa10 [ 94.163629][ T7440] dev_ioctl+0x7fa/0xab0 [ 94.167867][ T7440] sock_do_ioctl+0x11c/0x260 [ 94.172468][ T7440] sock_ioctl+0x46a/0x640 [ 94.176801][ T7440] ? __pfx_sock_ioctl+0x10/0x10 [ 94.181642][ T7440] __se_sys_ioctl+0xc9/0x140 [ 94.186333][ T7440] __x64_sys_ioctl+0x43/0x50 [ 94.190944][ T7440] x64_sys_call+0x1690/0x2dc0 [ 94.195672][ T7440] do_syscall_64+0xc9/0x1c0 [ 94.200250][ T7440] ? clear_bhb_loop+0x55/0xb0 [ 94.204912][ T7440] ? clear_bhb_loop+0x55/0xb0 [ 94.209704][ T7440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.215588][ T7440] RIP: 0033:0x7f08fa47e819 [ 94.220000][ T7440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.239654][ T7440] RSP: 002b:00007f08f8af7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 94.248067][ T7440] RAX: ffffffffffffffda RBX: 00007f08fa635fa0 RCX: 00007f08fa47e819 [ 94.256034][ T7440] RDX: 0000000020002280 RSI: 0000000000008914 RDI: 000000000000000c [ 94.264114][ T7440] RBP: 00007f08f8af7090 R08: 0000000000000000 R09: 0000000000000000 [ 94.272125][ T7440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 94.280101][ T7440] R13: 0000000000000000 R14: 00007f08fa635fa0 R15: 00007ffda89a3a68 [ 94.288088][ T7440] [ 94.291291][ T7440] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 94.306440][ T29] kauditd_printk_skb: 205 callbacks suppressed [ 94.306450][ T29] audit: type=1400 audit(1732383022.064:14223): avc: denied { ioctl } for pid=7442 comm="syz.1.1179" path="socket:[17019]" dev="sockfs" ino=17019 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 94.559145][ T7468] pim6reg1: entered promiscuous mode [ 94.564536][ T7468] pim6reg1: entered allmulticast mode [ 94.577642][ T7467] hub 6-0:1.0: USB hub found [ 94.582756][ T7467] hub 6-0:1.0: 8 ports detected [ 94.593770][ T7467] syz.6.1181[7467] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.593942][ T7467] syz.6.1181[7467] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.605463][ T7467] syz.6.1181[7467] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.620464][ T7467] loop6: detected capacity change from 0 to 256 [ 94.642073][ T7467] FAT-fs (loop6): IO charset cp860vC=|GYO=4a!iwD=iǚpoX`b씟RD$EvOZ74Đe'-m?@53.UٶS).--y -Z+e{6WoyLJ1@8%㇋GkQgd?wMVo+ not found [ 94.667257][ T29] audit: type=1107 audit(1732383022.354:14224): pid=7448 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 94.693410][ T7464] syzkaller0: entered allmulticast mode [ 94.726745][ T29] audit: type=1326 audit(1732383022.494:14225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7462 comm="syz.4.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c539ce819 code=0x7ffc0000 [ 94.750407][ T29] audit: type=1326 audit(1732383022.494:14226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7462 comm="syz.4.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c539ce819 code=0x7ffc0000 [ 94.790523][ T29] audit: type=1326 audit(1732383022.544:14227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7462 comm="syz.4.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9c539ce819 code=0x7ffc0000 [ 94.814035][ T29] audit: type=1326 audit(1732383022.544:14228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7462 comm="syz.4.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c539ce819 code=0x7ffc0000 [ 94.837579][ T29] audit: type=1326 audit(1732383022.544:14229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7462 comm="syz.4.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c539ce819 code=0x7ffc0000 [ 94.861302][ T29] audit: type=1326 audit(1732383022.544:14230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7462 comm="syz.4.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9c539ce819 code=0x7ffc0000 [ 94.885403][ T29] audit: type=1326 audit(1732383022.544:14231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7462 comm="syz.4.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c539ce819 code=0x7ffc0000 [ 94.908905][ T29] audit: type=1326 audit(1732383022.544:14232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7462 comm="syz.4.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c539ce819 code=0x7ffc0000 [ 94.943571][ T7464] syzkaller0 (unregistering): left allmulticast mode [ 94.959702][ T7474] netlink: 1216 bytes leftover after parsing attributes in process `syz.2.1190'. [ 94.969093][ T7474] netlink: 4436 bytes leftover after parsing attributes in process `syz.2.1190'. [ 94.980729][ T7474] xt_hashlimit: max too large, truncated to 1048576 [ 95.183879][ T7497] pim6reg1: entered promiscuous mode [ 95.189207][ T7497] pim6reg1: entered allmulticast mode [ 95.202637][ T7499] syzkaller0: entered allmulticast mode [ 95.301481][ T7508] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 95.312437][ T7508] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=7508 comm=+}[@ [ 95.329309][ T7511] syzkaller0: entered allmulticast mode [ 95.339889][ T7511] syzkaller0 (unregistering): left allmulticast mode [ 95.693324][ T7541] FAULT_INJECTION: forcing a failure. [ 95.693324][ T7541] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 95.706716][ T7541] CPU: 1 UID: 0 PID: 7541 Comm: syz.1.1216 Not tainted 6.12.0-syzkaller-07834-g06afb0f36106 #0 [ 95.717184][ T7541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 95.727239][ T7541] Call Trace: [ 95.730515][ T7541] [ 95.733475][ T7541] dump_stack_lvl+0xf2/0x150 [ 95.738118][ T7541] dump_stack+0x15/0x20 [ 95.742256][ T7541] should_fail_ex+0x223/0x230 [ 95.746917][ T7541] should_fail+0xb/0x10 [ 95.751067][ T7541] should_fail_usercopy+0x1a/0x20 [ 95.756077][ T7541] _copy_from_user+0x1e/0xb0 [ 95.760670][ T7541] __se_sys_name_to_handle_at+0x167/0x490 [ 95.766380][ T7541] ? ksys_write+0x176/0x1b0 [ 95.770869][ T7541] __x64_sys_name_to_handle_at+0x67/0x80 [ 95.776608][ T7541] x64_sys_call+0xe82/0x2dc0 [ 95.781224][ T7541] do_syscall_64+0xc9/0x1c0 [ 95.785783][ T7541] ? clear_bhb_loop+0x55/0xb0 [ 95.790444][ T7541] ? clear_bhb_loop+0x55/0xb0 [ 95.795109][ T7541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.801002][ T7541] RIP: 0033:0x7f1f1c04e819 [ 95.805400][ T7541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.825052][ T7541] RSP: 002b:00007f1f1a6c1038 EFLAGS: 00000246 ORIG_RAX: 000000000000012f [ 95.833467][ T7541] RAX: ffffffffffffffda RBX: 00007f1f1c205fa0 RCX: 00007f1f1c04e819 [ 95.841426][ T7541] RDX: 0000000020000100 RSI: 0000000020000080 RDI: 0000000000000005 [ 95.849413][ T7541] RBP: 00007f1f1a6c1090 R08: 0000000000001200 R09: 0000000000000000 [ 95.857366][ T7541] R10: 0000000020000140 R11: 0000000000000246 R12: 0000000000000001 [ 95.865381][ T7541] R13: 0000000000000000 R14: 00007f1f1c205fa0 R15: 00007fff59d7b518 [ 95.866252][ T7543] hub 6-0:1.0: USB hub found [ 95.873347][ T7541] [ 95.881214][ T7543] hub 6-0:1.0: 8 ports detected [ 95.891263][ T7532] syz.5.1212[7532] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 95.891364][ T7532] syz.5.1212[7532] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 95.903000][ T7532] syz.5.1212[7532] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 95.916300][ T7532] loop5: detected capacity change from 0 to 256 [ 95.944030][ T7532] FAT-fs (loop5): IO charset cp860vC=|GYO=4a!iwD=iǚpoX`b씟RD$EvOZ74Đe'-m?@53.UٶS).--y -Z+e{6WoyLJ1@8%㇋GkQgd?wMVo+ not found [ 95.981036][ T7552] syzkaller0: entered allmulticast mode [ 96.015838][ T7552] syzkaller0 (unregistering): left allmulticast mode [ 96.045457][ T7498] syzkaller0: left allmulticast mode [ 96.066327][ T7563] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1222'. [ 96.159554][ T7578] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.162761][ T7581] 9pnet_fd: Insufficient options for proto=fd [ 96.241726][ T7588] loop5: detected capacity change from 0 to 512 [ 96.249187][ T7588] EXT4-fs: Ignoring removed nobh option [ 96.254773][ T7588] EXT4-fs: Ignoring removed mblk_io_submit option [ 96.263167][ T7578] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.277130][ T7588] EXT4-fs mount: 87 callbacks suppressed [ 96.277139][ T7588] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.408326][ T7593] hub 6-0:1.0: USB hub found [ 96.413090][ T7593] hub 6-0:1.0: 8 ports detected [ 96.422683][ T7593] syz.1.1233[7593] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 96.480577][ T7578] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.517309][ T4310] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.581237][ T7578] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.678858][ T7578] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.706745][ T7578] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.733585][ T7578] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.760408][ T7578] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.937065][ T7599] loop5: detected capacity change from 0 to 1024 [ 96.944024][ T7603] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12392 sclass=netlink_route_socket pid=7603 comm=syz.2.1239 [ 96.968426][ T7599] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.988351][ T7607] loop4: detected capacity change from 0 to 1024 [ 97.002562][ T7599] EXT4-fs: Ignoring removed mblk_io_submit option [ 97.011882][ T7599] EXT4-fs (loop5): changing journal_checksum during remount not supported; ignoring [ 97.021428][ T7599] EXT4-fs (loop5): can't enable nombcache during remount [ 97.036614][ T7607] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.092772][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.092735][ T7623] FAULT_INJECTION: forcing a failure. [ 97.092735][ T7623] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 97.092826][ T7623] CPU: 1 UID: 0 PID: 7623 Comm: syz.2.1246 Not tainted 6.12.0-syzkaller-07834-g06afb0f36106 #0 [ 97.125059][ T7623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 97.135102][ T7623] Call Trace: [ 97.138446][ T7623] [ 97.141367][ T7623] dump_stack_lvl+0xf2/0x150 [ 97.145959][ T7623] dump_stack+0x15/0x20 [ 97.150105][ T7623] should_fail_ex+0x223/0x230 [ 97.154848][ T7623] should_fail+0xb/0x10 [ 97.159029][ T7623] should_fail_usercopy+0x1a/0x20 [ 97.164053][ T7623] _copy_to_iter+0xd5/0xd00 [ 97.168610][ T7623] get_random_bytes_user+0x112/0x260 [ 97.173896][ T7623] ? import_ubuf+0xec/0x130 [ 97.178443][ T7623] __x64_sys_getrandom+0xb5/0x190 [ 97.183477][ T7623] x64_sys_call+0x118a/0x2dc0 [ 97.188322][ T7623] do_syscall_64+0xc9/0x1c0 [ 97.192948][ T7623] ? clear_bhb_loop+0x55/0xb0 [ 97.197636][ T7623] ? clear_bhb_loop+0x55/0xb0 [ 97.202305][ T7623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.208267][ T7623] RIP: 0033:0x7f5624a0e819 [ 97.212739][ T7623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.232352][ T7623] RSP: 002b:00007f5623087038 EFLAGS: 00000246 ORIG_RAX: 000000000000013e [ 97.240798][ T7623] RAX: ffffffffffffffda RBX: 00007f5624bc5fa0 RCX: 00007f5624a0e819 [ 97.248765][ T7623] RDX: 0000000000000000 RSI: 00000000ffffff9a RDI: 0000000020000240 [ 97.256748][ T7623] RBP: 00007f5623087090 R08: 0000000000000000 R09: 0000000000000000 [ 97.264711][ T7623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 97.272691][ T7623] R13: 0000000000000001 R14: 00007f5624bc5fa0 R15: 00007ffd6622a738 [ 97.280657][ T7623] [ 97.298169][ T7625] loop6: detected capacity change from 0 to 2048 [ 97.315442][ T4310] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.327725][ T7625] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.383712][ T5136] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.448307][ T7643] FAULT_INJECTION: forcing a failure. [ 97.448307][ T7643] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 97.461443][ T7643] CPU: 1 UID: 0 PID: 7643 Comm: syz.6.1253 Not tainted 6.12.0-syzkaller-07834-g06afb0f36106 #0 [ 97.471782][ T7643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 97.481821][ T7643] Call Trace: [ 97.485150][ T7643] [ 97.488072][ T7643] dump_stack_lvl+0xf2/0x150 [ 97.492666][ T7643] dump_stack+0x15/0x20 [ 97.496827][ T7643] should_fail_ex+0x223/0x230 [ 97.501521][ T7643] should_fail+0xb/0x10 [ 97.505696][ T7643] should_fail_usercopy+0x1a/0x20 [ 97.510704][ T7643] _copy_from_user+0x1e/0xb0 [ 97.515286][ T7643] vmemdup_user+0x12e/0x1b0 [ 97.519872][ T7643] map_get_next_key+0x140/0x310 [ 97.524711][ T7643] ? __sys_bpf+0x6c1/0x7a0 [ 97.529112][ T7643] __sys_bpf+0x6cb/0x7a0 [ 97.533340][ T7643] __x64_sys_bpf+0x43/0x50 [ 97.537750][ T7643] x64_sys_call+0x2914/0x2dc0 [ 97.542429][ T7643] do_syscall_64+0xc9/0x1c0 [ 97.542884][ T7644] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1249'. [ 97.546993][ T7643] ? clear_bhb_loop+0x55/0xb0 [ 97.547022][ T7643] ? clear_bhb_loop+0x55/0xb0 [ 97.565198][ T7643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.571145][ T7643] RIP: 0033:0x7f14e817e819 [ 97.575542][ T7643] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.595186][ T7643] RSP: 002b:00007f14e67f1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 97.603579][ T7643] RAX: ffffffffffffffda RBX: 00007f14e8335fa0 RCX: 00007f14e817e819 [ 97.611583][ T7643] RDX: 0000000000000020 RSI: 00000000200000c0 RDI: 0000000000000004 [ 97.619555][ T7643] RBP: 00007f14e67f1090 R08: 0000000000000000 R09: 0000000000000000 [ 97.627510][ T7643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.635460][ T7643] R13: 0000000000000000 R14: 00007f14e8335fa0 R15: 00007ffd01ebe748 [ 97.643417][ T7643] [ 97.763424][ T7663] loop5: detected capacity change from 0 to 512 [ 97.777234][ T7664] ref_ctr_offset mismatch. inode: 0x279 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x82 [ 97.779553][ T7663] EXT4-fs: Ignoring removed i_version option [ 97.795996][ T7663] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 97.806754][ T7663] EXT4-fs error (device loop5): ext4_orphan_get:1389: inode #15: comm syz.5.1261: iget: bad extra_isize 15 (inode size 256) [ 97.820746][ T7663] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.1261: couldn't read orphan inode 15 (err -117) [ 97.833157][ T7663] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.847560][ T7669] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 97.898496][ T4310] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.915837][ T7679] IPv6: sit1: Disabled Multicast RS [ 97.940420][ T7688] FAULT_INJECTION: forcing a failure. [ 97.940420][ T7688] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 97.953910][ T7688] CPU: 0 UID: 0 PID: 7688 Comm: syz.4.1271 Not tainted 6.12.0-syzkaller-07834-g06afb0f36106 #0 [ 97.953933][ T7688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 97.953943][ T7688] Call Trace: [ 97.953948][ T7688] [ 97.953955][ T7688] dump_stack_lvl+0xf2/0x150 [ 97.953984][ T7688] dump_stack+0x15/0x20 [ 97.954013][ T7688] should_fail_ex+0x223/0x230 [ 97.954038][ T7688] should_fail_alloc_page+0xfd/0x110 [ 97.954059][ T7688] __alloc_pages_noprof+0x109/0x340 [ 97.954093][ T7688] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 97.954137][ T7688] folio_alloc_noprof+0xee/0x130 [ 97.954161][ T7688] filemap_alloc_folio_noprof+0x69/0x220 [ 97.954226][ T7688] __filemap_get_folio+0x298/0x5b0 [ 97.954376][ T7688] ? should_failslab+0x8f/0xb0 [ 97.954394][ T7688] ? __kmalloc_noprof+0x165/0x370 [ 97.954421][ T7688] aio_setup_ring+0x263/0x6a0 [ 97.954462][ T7688] ioctx_alloc+0x2b2/0x4c0 [ 97.954493][ T7688] __se_sys_io_setup+0x6b/0x1b0 [ 97.954521][ T7688] __x64_sys_io_setup+0x31/0x40 [ 97.954548][ T7688] x64_sys_call+0x160f/0x2dc0 [ 97.954671][ T7688] do_syscall_64+0xc9/0x1c0 [ 97.954695][ T7688] ? clear_bhb_loop+0x55/0xb0 [ 97.954726][ T7688] ? clear_bhb_loop+0x55/0xb0 [ 97.954750][ T7688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.954774][ T7688] RIP: 0033:0x7f9c539ce819 [ 97.954804][ T7688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.954820][ T7688] RSP: 002b:00007f9c52047038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 97.954836][ T7688] RAX: ffffffffffffffda RBX: 00007f9c53b85fa0 RCX: 00007f9c539ce819 [ 97.954848][ T7688] RDX: 0000000000000000 RSI: 0000000020000680 RDI: 0000000000002004 [ 97.954914][ T7688] RBP: 00007f9c52047090 R08: 0000000000000000 R09: 0000000000000000 [ 97.954986][ T7688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 97.954998][ T7688] R13: 0000000000000000 R14: 00007f9c53b85fa0 R15: 00007fffe0c48238 [ 97.955015][ T7688] [ 98.003647][ T7691] netlink: 12 bytes leftover after parsing attributes in process `&/'. [ 98.169761][ T7703] netlink: 12 bytes leftover after parsing attributes in process `&/'. [ 98.318733][ T7711] FAULT_INJECTION: forcing a failure. [ 98.318733][ T7711] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 98.332113][ T7711] CPU: 0 UID: 0 PID: 7711 Comm: syz.4.1280 Not tainted 6.12.0-syzkaller-07834-g06afb0f36106 #0 [ 98.342532][ T7711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 98.352609][ T7711] Call Trace: [ 98.355964][ T7711] [ 98.358893][ T7711] dump_stack_lvl+0xf2/0x150 [ 98.363614][ T7711] dump_stack+0x15/0x20 [ 98.367765][ T7711] should_fail_ex+0x223/0x230 [ 98.372509][ T7711] should_fail_alloc_page+0xfd/0x110 [ 98.377813][ T7711] __alloc_pages_noprof+0x109/0x340 [ 98.383017][ T7711] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 98.388447][ T7711] vma_alloc_folio_noprof+0x1a0/0x2f0 [ 98.393902][ T7711] handle_mm_fault+0xdbe/0x2aa0 [ 98.398781][ T7711] exc_page_fault+0x3b9/0x650 [ 98.403490][ T7711] asm_exc_page_fault+0x26/0x30 [ 98.408516][ T7711] RIP: 0033:0x7f9c53891900 [ 98.412919][ T7711] Code: 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 47 0f b6 0c 08 45 84 c9 74 08 <45> 88 0c 00 49 8b 47 10 48 83 c0 01 49 89 47 10 83 e9 01 73 d3 41 [ 98.417331][ T7714] hub 6-0:1.0: USB hub found [ 98.432561][ T7711] RSP: 002b:00007f9c520464a0 EFLAGS: 00010202 [ 98.432645][ T7711] RAX: 0000000000019000 RBX: 00007f9c52046540 RCX: 0000000000000101 [ 98.432658][ T7711] RDX: 0000000000000be6 RSI: 0000000000004be7 RDI: 00007f9c520465e0 [ 98.432671][ T7711] RBP: 0000000000000102 R08: 00007f9c49c27000 R09: 0000000000000007 [ 98.437387][ T7714] hub 6-0:1.0: 8 ports detected [ 98.443313][ T7711] R10: 0000000020002102 R11: 000000000000061a R12: 0000000000004001 [ 98.472297][ T7714] bpf_get_probe_write_proto: 2 callbacks suppressed [ 98.472358][ T7714] syz.1.1278[7714] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.479995][ T7711] R13: 00007f9c53a55fa0 R14: 000000000000001c R15: 00007f9c520465e0 [ 98.480020][ T7711] [ 98.480282][ T7711] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 98.486751][ T7714] syz.1.1278[7714] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.486824][ T7714] syz.1.1278[7714] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.582413][ T7716] hub 6-0:1.0: USB hub found [ 98.598762][ T7716] hub 6-0:1.0: 8 ports detected [ 98.609363][ T7716] syz.5.1277[7716] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.609424][ T7716] syz.5.1277[7716] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.620941][ T7716] syz.5.1277[7716] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.639152][ T7716] loop5: detected capacity change from 0 to 256 [ 98.716988][ T7716] FAT-fs (loop5): IO charset cp860vC=|GYO=4a!iwD=iǚpoX`b씟RD$EvOZ74Đe'-m?@53.UٶS).--y -Z+e{6WoyLJ1@8%㇋GkQgd?wMVo+ not found [ 98.763739][ T7711] loop4: detected capacity change from 0 to 1024 [ 98.771122][ T7711] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 98.782863][ T7711] JBD2: no valid journal superblock found [ 98.788675][ T7711] EXT4-fs (loop4): Could not load journal inode [ 98.823318][ T7718] FAULT_INJECTION: forcing a failure. [ 98.823318][ T7718] name failslab, interval 1, probability 0, space 0, times 0 [ 98.836146][ T7718] CPU: 1 UID: 0 PID: 7718 Comm: syz.6.1282 Not tainted 6.12.0-syzkaller-07834-g06afb0f36106 #0 [ 98.846567][ T7718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 98.856675][ T7718] Call Trace: [ 98.860009][ T7718] [ 98.862937][ T7718] dump_stack_lvl+0xf2/0x150 [ 98.867541][ T7718] dump_stack+0x15/0x20 [ 98.871702][ T7718] should_fail_ex+0x223/0x230 [ 98.876393][ T7718] ? vm_area_alloc+0x2c/0x130 [ 98.881129][ T7718] should_failslab+0x8f/0xb0 [ 98.885754][ T7718] kmem_cache_alloc_noprof+0x4c/0x290 [ 98.891158][ T7718] vm_area_alloc+0x2c/0x130 [ 98.895699][ T7718] mmap_region+0xa02/0x14a0 [ 98.900356][ T7718] do_mmap+0x718/0xb60 [ 98.904429][ T7718] vm_mmap_pgoff+0x133/0x290 [ 98.909094][ T7718] ksys_mmap_pgoff+0x286/0x330 [ 98.913858][ T7718] x64_sys_call+0x1940/0x2dc0 [ 98.918772][ T7718] do_syscall_64+0xc9/0x1c0 [ 98.923273][ T7718] ? clear_bhb_loop+0x55/0xb0 [ 98.928034][ T7718] ? clear_bhb_loop+0x55/0xb0 [ 98.932707][ T7718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.938627][ T7718] RIP: 0033:0x7f14e817e819 [ 98.943032][ T7718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.962703][ T7718] RSP: 002b:00007f14e67f1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 98.971190][ T7718] RAX: ffffffffffffffda RBX: 00007f14e8335fa0 RCX: 00007f14e817e819 [ 98.979222][ T7718] RDX: 0000000001000002 RSI: 0000000000400000 RDI: 0000000020000000 [ 98.987186][ T7718] RBP: 00007f14e67f1090 R08: 0000000000000003 R09: 0000000000000000 [ 98.995184][ T7718] R10: 0000000000011012 R11: 0000000000000246 R12: 0000000000000002 [ 99.003163][ T7718] R13: 0000000000000000 R14: 00007f14e8335fa0 R15: 00007ffd01ebe748 [ 99.011128][ T7718] [ 99.048865][ T7726] pim6reg1: entered promiscuous mode [ 99.054208][ T7726] pim6reg1: entered allmulticast mode [ 99.105555][ T7728] netlink: 12 bytes leftover after parsing attributes in process `&/'. [ 99.237401][ T7766] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1293'. [ 99.257258][ T7743] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1293'. [ 99.290956][ T7768] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1296'. [ 99.314045][ T7743] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1293'. [ 99.428182][ T7778] hub 6-0:1.0: USB hub found [ 99.433157][ T7778] hub 6-0:1.0: 8 ports detected [ 99.442604][ T7778] syz.5.1298[7778] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.442689][ T7778] syz.5.1298[7778] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.454300][ T7778] syz.5.1298[7778] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.469554][ T7778] loop5: detected capacity change from 0 to 256 [ 99.491855][ T7778] FAT-fs (loop5): IO charset cp860vC=|GYO=4a!iwD=iǚpoX`b씟RD$EvOZ74Đe'-m?@53.UٶS).--y -Z+e{6WoyLJ1@8%㇋GkQgd?wMVo+ not found [ 99.529354][ T29] kauditd_printk_skb: 77 callbacks suppressed [ 99.529372][ T29] audit: type=1107 audit(1732383027.204:14310): pid=7760 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 99.565108][ T7781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1304'. [ 99.583177][ T7781] bond1: entered promiscuous mode [ 99.588410][ T7781] bond1: entered allmulticast mode [ 99.609105][ T7781] 8021q: adding VLAN 0 to HW filter on device bond1 [ 99.625155][ T7785] netlink: 12 bytes leftover after parsing attributes in process `&/'. [ 99.638669][ T7784] pim6reg1: entered promiscuous mode [ 99.644003][ T7784] pim6reg1: entered allmulticast mode [ 99.691862][ T7787] ebtables: ebtables: counters copy to user failed while replacing table [ 99.736821][ T7794] vcan0 speed is unknown, defaulting to 1000 [ 99.802928][ T7807] ref_ctr_offset mismatch. inode: 0x2b8 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x82 [ 99.922211][ T29] audit: type=1326 audit(1732383027.684:14311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7814 comm="syz.4.1317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c539ce819 code=0x7ffc0000 [ 99.946668][ T7815] FAULT_INJECTION: forcing a failure. [ 99.946668][ T7815] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 99.959954][ T7815] CPU: 1 UID: 0 PID: 7815 Comm: syz.4.1317 Not tainted 6.12.0-syzkaller-07834-g06afb0f36106 #0 [ 99.970327][ T7815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 99.980388][ T7815] Call Trace: [ 99.983741][ T7815] [ 99.986677][ T7815] dump_stack_lvl+0xf2/0x150 [ 99.991282][ T7815] dump_stack+0x15/0x20 [ 99.995496][ T7815] should_fail_ex+0x223/0x230 [ 100.000267][ T7815] should_fail_alloc_page+0xfd/0x110 [ 100.005562][ T7815] __alloc_pages_noprof+0x109/0x340 [ 100.010815][ T7815] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 100.016228][ T7815] folio_alloc_noprof+0xee/0x130 [ 100.021204][ T7815] filemap_alloc_folio_noprof+0x69/0x220 [ 100.026996][ T7815] __filemap_get_folio+0x298/0x5b0 [ 100.032110][ T7815] ? should_failslab+0x8f/0xb0 [ 100.036868][ T7815] ? __kmalloc_noprof+0x165/0x370 [ 100.041917][ T7815] aio_setup_ring+0x263/0x6a0 [ 100.046602][ T7815] ioctx_alloc+0x2b2/0x4c0 [ 100.051034][ T7815] __se_sys_io_setup+0x6b/0x1b0 [ 100.055935][ T7815] __x64_sys_io_setup+0x31/0x40 [ 100.060825][ T7815] x64_sys_call+0x160f/0x2dc0 [ 100.065499][ T7815] do_syscall_64+0xc9/0x1c0 [ 100.070057][ T7815] ? clear_bhb_loop+0x55/0xb0 [ 100.074727][ T7815] ? clear_bhb_loop+0x55/0xb0 [ 100.079480][ T7815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.085367][ T7815] RIP: 0033:0x7f9c539ce819 [ 100.089815][ T7815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.109510][ T7815] RSP: 002b:00007f9c52047038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 100.117974][ T7815] RAX: ffffffffffffffda RBX: 00007f9c53b85fa0 RCX: 00007f9c539ce819 [ 100.125992][ T7815] RDX: 0000000000000000 RSI: 0000000020000680 RDI: 0000000000002004 [ 100.133952][ T7815] RBP: 00007f9c52047090 R08: 0000000000000000 R09: 0000000000000000 [ 100.141944][ T7815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 100.149911][ T7815] R13: 0000000000000000 R14: 00007f9c53b85fa0 R15: 00007fffe0c48238 [ 100.157906][ T7815] [ 100.164628][ T29] audit: type=1326 audit(1732383027.714:14312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7814 comm="syz.4.1317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9c539cd1b0 code=0x7ffc0000 [ 100.188297][ T29] audit: type=1326 audit(1732383027.714:14313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7814 comm="syz.4.1317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9c539cd2ff code=0x7ffc0000 [ 100.211689][ T29] audit: type=1326 audit(1732383027.714:14314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7814 comm="syz.4.1317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f9c539ce819 code=0x7ffc0000 [ 100.225663][ T7816] loop6: detected capacity change from 0 to 4096 [ 100.235249][ T29] audit: type=1326 audit(1732383027.714:14315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7812 comm="syz.6.1316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14e817e819 code=0x7ffc0000 [ 100.264996][ T29] audit: type=1326 audit(1732383027.714:14316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7812 comm="syz.6.1316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f14e817e819 code=0x7ffc0000 [ 100.288649][ T29] audit: type=1326 audit(1732383027.714:14317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7812 comm="syz.6.1316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14e817e819 code=0x7ffc0000 [ 100.312169][ T29] audit: type=1326 audit(1732383027.724:14318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7812 comm="syz.6.1316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14e817e819 code=0x7ffc0000 [ 100.335751][ T29] audit: type=1326 audit(1732383027.724:14319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7812 comm="syz.6.1316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f14e817e819 code=0x7ffc0000 [ 100.403620][ T7816] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.456495][ T7833] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1324'. [ 100.466175][ T7823] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1319'. [ 100.506471][ T7833] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1324'. [ 100.530787][ T5136] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.557159][ T7838] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 100.609659][ T7849] loop2: detected capacity change from 0 to 1024 [ 100.625163][ T7849] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.643280][ T7849] FAULT_INJECTION: forcing a failure. [ 100.643280][ T7849] name failslab, interval 1, probability 0, space 0, times 0 [ 100.656042][ T7849] CPU: 1 UID: 0 PID: 7849 Comm: syz.2.1329 Not tainted 6.12.0-syzkaller-07834-g06afb0f36106 #0 [ 100.666393][ T7849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 100.676507][ T7849] Call Trace: [ 100.679768][ T7849] [ 100.682693][ T7849] dump_stack_lvl+0xf2/0x150 [ 100.687361][ T7849] dump_stack+0x15/0x20 [ 100.691518][ T7849] should_fail_ex+0x223/0x230 [ 100.696205][ T7849] ? copy_splice_read+0xc7/0x5d0 [ 100.701168][ T7849] should_failslab+0x8f/0xb0 [ 100.705766][ T7849] __kmalloc_noprof+0xa5/0x370 [ 100.710533][ T7849] copy_splice_read+0xc7/0x5d0 [ 100.715337][ T7849] ? __pfx_ext4_file_splice_read+0x10/0x10 [ 100.721209][ T7849] splice_direct_to_actor+0x28b/0x670 [ 100.726599][ T7849] ? __pfx_direct_splice_actor+0x10/0x10 [ 100.732267][ T7849] do_splice_direct+0xd7/0x150 [ 100.737043][ T7849] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 100.742960][ T7849] do_sendfile+0x398/0x660 [ 100.747373][ T7849] __x64_sys_sendfile64+0x110/0x150 [ 100.752570][ T7849] x64_sys_call+0xfbd/0x2dc0 [ 100.757186][ T7849] do_syscall_64+0xc9/0x1c0 [ 100.761756][ T7849] ? clear_bhb_loop+0x55/0xb0 [ 100.766531][ T7849] ? clear_bhb_loop+0x55/0xb0 [ 100.771209][ T7849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.777158][ T7849] RIP: 0033:0x7f5624a0e819 [ 100.781569][ T7849] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.801353][ T7849] RSP: 002b:00007f5623087038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 100.809773][ T7849] RAX: ffffffffffffffda RBX: 00007f5624bc5fa0 RCX: 00007f5624a0e819 [ 100.817733][ T7849] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 100.825696][ T7849] RBP: 00007f5623087090 R08: 0000000000000000 R09: 0000000000000000 [ 100.833656][ T7849] R10: 0000000100000008 R11: 0000000000000246 R12: 0000000000000002 [ 100.841619][ T7849] R13: 0000000000000000 R14: 00007f5624bc5fa0 R15: 00007ffd6622a738 [ 100.849618][ T7849] [ 100.867075][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.149345][ T4914] hid-generic 0007:0005:0002.0002: unknown main item tag 0x2 [ 101.150928][ T3393] IPVS: starting estimator thread 0... [ 101.156880][ T4914] hid-generic 0007:0005:0002.0002: unknown main item tag 0xd [ 101.169930][ T4914] hid-generic 0007:0005:0002.0002: unknown main item tag 0x5 [ 101.177427][ T4914] hid-generic 0007:0005:0002.0002: unknown main item tag 0xd [ 101.184868][ T4914] hid-generic 0007:0005:0002.0002: unknown main item tag 0x2 [ 101.192248][ T4914] hid-generic 0007:0005:0002.0002: unknown main item tag 0x7 [ 101.199661][ T4914] hid-generic 0007:0005:0002.0002: item fetching failed at offset 52/197 [ 101.208165][ T4914] hid-generic 0007:0005:0002.0002: probe with driver hid-generic failed with error -22 [ 101.264064][ T7909] IPVS: using max 2928 ests per chain, 146400 per kthread [ 101.285860][ T7923] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.293301][ T7923] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.303654][ T7923] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.311247][ T7923] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.312244][ T7925] FAULT_INJECTION: forcing a failure. [ 101.312244][ T7925] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 101.331723][ T7925] CPU: 0 UID: 0 PID: 7925 Comm: syz.5.1354 Not tainted 6.12.0-syzkaller-07834-g06afb0f36106 #0 [ 101.342068][ T7925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 101.352141][ T7925] Call Trace: [ 101.355488][ T7925] [ 101.358450][ T7925] dump_stack_lvl+0xf2/0x150 [ 101.363140][ T7925] dump_stack+0x15/0x20 [ 101.367343][ T7925] should_fail_ex+0x223/0x230 [ 101.372088][ T7925] should_fail+0xb/0x10 [ 101.376269][ T7925] should_fail_usercopy+0x1a/0x20 [ 101.381356][ T7925] copy_page_from_iter_atomic+0x228/0xf80 [ 101.387082][ T7925] ? shmem_write_begin+0xa2/0x180 [ 101.392094][ T7925] ? shmem_write_begin+0xda/0x180 [ 101.397153][ T7925] generic_perform_write+0x2f1/0x4a0 [ 101.402445][ T7925] shmem_file_write_iter+0xc2/0xe0 [ 101.407650][ T7925] do_iter_readv_writev+0x394/0x450 [ 101.412911][ T7925] vfs_writev+0x2d4/0x880 [ 101.417226][ T7925] ? proc_fail_nth_write+0x12a/0x150 [ 101.422595][ T7925] __se_sys_pwritev2+0x100/0x1c0 [ 101.427533][ T7925] __x64_sys_pwritev2+0x78/0x90 [ 101.432454][ T7925] x64_sys_call+0x2afe/0x2dc0 [ 101.437121][ T7925] do_syscall_64+0xc9/0x1c0 [ 101.441623][ T7925] ? clear_bhb_loop+0x55/0xb0 [ 101.446297][ T7925] ? clear_bhb_loop+0x55/0xb0 [ 101.450965][ T7925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.456862][ T7925] RIP: 0033:0x7f08fa47e819 [ 101.461290][ T7925] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.480895][ T7925] RSP: 002b:00007f08f8af7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 101.489388][ T7925] RAX: ffffffffffffffda RBX: 00007f08fa635fa0 RCX: 00007f08fa47e819 [ 101.497359][ T7925] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000004 [ 101.505321][ T7925] RBP: 00007f08f8af7090 R08: 0000000000000000 R09: 0000000000000003 [ 101.513329][ T7925] R10: 0000000000007a00 R11: 0000000000000246 R12: 0000000000000002 [ 101.521327][ T7925] R13: 0000000000000000 R14: 00007f08fa635fa0 R15: 00007ffda89a3a68 [ 101.529299][ T7925] [ 101.570514][ T7932] Cannot find del_set index 0 as target [ 101.597979][ T7935] nfs4: Unknown parameter '' [ 101.617549][ T7940] syzkaller0: entered allmulticast mode [ 101.627923][ T7940] syzkaller0 (unregistering): left allmulticast mode [ 101.751647][ T7963] loop2: detected capacity change from 0 to 512 [ 101.759125][ T7963] EXT4-fs: Ignoring removed orlov option [ 101.765550][ T7963] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 101.788350][ T7963] EXT4-fs (loop2): 1 orphan inode deleted [ 101.794149][ T7963] EXT4-fs (loop2): 1 truncate cleaned up [ 101.795732][ T7970] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.802805][ T7963] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.808541][ T7970] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.829413][ T7970] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.838157][ T7970] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.851624][ T7963] netlink: 'syz.2.1370': attribute type 1 has an invalid length. [ 101.867357][ T7970] vxlan0: entered promiscuous mode [ 101.904800][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.941515][ T7981] sctp: [Deprecated]: syz.6.1379 (pid 7981) Use of struct sctp_assoc_value in delayed_ack socket option. [ 101.941515][ T7981] Use struct sctp_sack_info instead [ 101.967415][ T7983] pim6reg1: entered promiscuous mode [ 101.972738][ T7983] pim6reg1: entered allmulticast mode [ 102.006157][ T8000] loop6: detected capacity change from 0 to 512 [ 102.012655][ T8000] EXT4-fs: Ignoring removed i_version option [ 102.019429][ T8000] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 102.037372][ T8000] EXT4-fs error (device loop6): ext4_orphan_get:1389: inode #15: comm syz.6.1383: iget: bad extra_isize 15 (inode size 256) [ 102.052464][ T8000] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.1383: couldn't read orphan inode 15 (err -117) [ 102.064881][ T8000] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.089828][ T8011] loop5: detected capacity change from 0 to 512 [ 102.098871][ T8013] syzkaller0: entered allmulticast mode [ 102.099521][ T8011] EXT4-fs: Ignoring removed i_version option [ 102.110760][ T8011] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 102.111549][ T5136] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.131750][ T8013] syzkaller0 (unregistering): left allmulticast mode [ 102.141207][ T8011] EXT4-fs error (device loop5): ext4_orphan_get:1389: inode #15: comm syz.5.1387: iget: bad extra_isize 15 (inode size 256) [ 102.154320][ T8011] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.1387: couldn't read orphan inode 15 (err -117) [ 102.166609][ T8011] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.191805][ T4310] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.220769][ T8022] loop5: detected capacity change from 0 to 4096 [ 102.239847][ T8022] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.273608][ T4310] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.293437][ T8035] pim6reg1: entered promiscuous mode [ 102.298816][ T8035] pim6reg1: entered allmulticast mode [ 102.336557][ T8043] FAULT_INJECTION: forcing a failure. [ 102.336557][ T8043] name failslab, interval 1, probability 0, space 0, times 0 [ 102.349300][ T8043] CPU: 0 UID: 0 PID: 8043 Comm: syz.6.1400 Not tainted 6.12.0-syzkaller-07834-g06afb0f36106 #0 [ 102.349445][ T8046] syzkaller0: entered allmulticast mode [ 102.359720][ T8043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 102.359735][ T8043] Call Trace: [ 102.359759][ T8043] [ 102.359766][ T8043] dump_stack_lvl+0xf2/0x150 [ 102.386155][ T8043] dump_stack+0x15/0x20 [ 102.390311][ T8043] should_fail_ex+0x223/0x230 [ 102.395029][ T8043] ? __anon_vma_prepare+0xcf/0x310 [ 102.400147][ T8043] should_failslab+0x8f/0xb0 [ 102.404731][ T8043] kmem_cache_alloc_noprof+0x4c/0x290 [ 102.410157][ T8043] __anon_vma_prepare+0xcf/0x310 [ 102.415088][ T8043] ? handle_mm_fault+0x1bee/0x2aa0 [ 102.420202][ T8043] handle_mm_fault+0x1d8b/0x2aa0 [ 102.425168][ T8043] ? __rcu_read_lock+0x36/0x50 [ 102.429973][ T8043] __get_user_pages+0xf2c/0x2670 [ 102.434985][ T8043] get_user_pages_remote+0x1df/0x790 [ 102.440305][ T8043] __update_ref_ctr+0x7d/0x310 [ 102.445251][ T8043] uprobe_mmap+0x2ba/0xcf0 [ 102.449660][ T8043] mmap_region+0xef1/0x14a0 [ 102.454169][ T8043] do_mmap+0x718/0xb60 [ 102.458230][ T8043] vm_mmap_pgoff+0x133/0x290 [ 102.462941][ T8043] ksys_mmap_pgoff+0x286/0x330 [ 102.467718][ T8043] x64_sys_call+0x1940/0x2dc0 [ 102.472406][ T8043] do_syscall_64+0xc9/0x1c0 [ 102.476909][ T8043] ? clear_bhb_loop+0x55/0xb0 [ 102.481586][ T8043] ? clear_bhb_loop+0x55/0xb0 [ 102.486262][ T8043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.492151][ T8043] RIP: 0033:0x7f14e817e819 [ 102.496637][ T8043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.516314][ T8043] RSP: 002b:00007f14e67f1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 102.524757][ T8043] RAX: ffffffffffffffda RBX: 00007f14e8335fa0 RCX: 00007f14e817e819 [ 102.532763][ T8043] RDX: 000000000000001e RSI: 0000000000003000 RDI: 0000000020002000 [ 102.540728][ T8043] RBP: 00007f14e67f1090 R08: 0000000000000007 R09: 0000000000000000 [ 102.548692][ T8043] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000002 [ 102.556709][ T8043] R13: 0000000000000000 R14: 00007f14e8335fa0 R15: 00007ffd01ebe748 [ 102.564697][ T8043] [ 102.567811][ T8043] ref_ctr increment failed for inode: 0x350 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888110cf8fc0 [ 102.584975][ T8042] uprobe: syz.6.1400:8042 failed to unregister, leaking uprobe [ 102.593897][ T8046] syzkaller0 (unregistering): left allmulticast mode [ 102.599411][ T8048] FAULT_INJECTION: forcing a failure. [ 102.599411][ T8048] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 102.613914][ T8048] CPU: 0 UID: 0 PID: 8048 Comm: syz.4.1402 Not tainted 6.12.0-syzkaller-07834-g06afb0f36106 #0 [ 102.624250][ T8048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 102.634315][ T8048] Call Trace: [ 102.637638][ T8048] [ 102.640584][ T8048] dump_stack_lvl+0xf2/0x150 [ 102.645243][ T8048] dump_stack+0x15/0x20 [ 102.649416][ T8048] should_fail_ex+0x223/0x230 [ 102.654088][ T8048] should_fail_alloc_page+0xfd/0x110 [ 102.659406][ T8048] __alloc_pages_noprof+0x109/0x340 [ 102.664705][ T8048] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 102.670079][ T8048] vma_alloc_folio_noprof+0x1a0/0x2f0 [ 102.675473][ T8048] handle_mm_fault+0xdbe/0x2aa0 [ 102.680377][ T8048] exc_page_fault+0x296/0x650 [ 102.685048][ T8048] ? __rcu_read_unlock+0x4e/0x70 [ 102.689982][ T8048] asm_exc_page_fault+0x26/0x30 [ 102.694836][ T8048] RIP: 0010:rep_stos_alternative+0x40/0x80 [ 102.700635][ T8048] Code: ff c7 48 ff c9 75 f6 c3 cc cc cc cc 48 89 07 48 83 c7 08 83 e9 08 74 ef 83 f9 08 73 ef eb de 66 2e 0f 1f 84 00 00 00 00 00 90 <48> 89 07 48 89 47 08 48 89 47 10 48 89 47 18 48 89 47 20 48 89 47 [ 102.720238][ T8048] RSP: 0018:ffffc9000d913c08 EFLAGS: 00050202 [ 102.726369][ T8048] RAX: 0000000000000000 RBX: 000000002002e080 RCX: 0000000000000080 [ 102.734386][ T8048] RDX: 0000000000000000 RSI: 000000002002d080 RDI: 000000002002e000 [ 102.742345][ T8048] RBP: 000000002002d080 R08: ffffffff81bf2188 R09: 0000000000000000 [ 102.750307][ T8048] R10: 0001ffffffffffff R11: ffff8881109c0000 R12: ffffc9000d913da0 [ 102.758362][ T8048] R13: 0000000000001000 R14: 00007fffffffefff R15: 000000000002c000 [ 102.766405][ T8048] ? iov_iter_zero+0x258/0xc50 [ 102.771250][ T8048] iov_iter_zero+0x277/0xc50 [ 102.775858][ T8048] read_iter_zero+0x5e/0x1e0 [ 102.780445][ T8048] do_iter_readv_writev+0x394/0x450 [ 102.785735][ T8048] vfs_readv+0x1df/0x660 [ 102.790048][ T8048] ? proc_fail_nth_write+0x12a/0x150 [ 102.795395][ T8048] do_readv+0xf4/0x220 [ 102.799503][ T8048] __x64_sys_readv+0x45/0x50 [ 102.804266][ T8048] x64_sys_call+0x2c34/0x2dc0 [ 102.808940][ T8048] do_syscall_64+0xc9/0x1c0 [ 102.813444][ T8048] ? clear_bhb_loop+0x55/0xb0 [ 102.818117][ T8048] ? clear_bhb_loop+0x55/0xb0 [ 102.822821][ T8048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.828708][ T8048] RIP: 0033:0x7f9c539ce819 [ 102.833178][ T8048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.852776][ T8048] RSP: 002b:00007f9c52047038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 102.861195][ T8048] RAX: ffffffffffffffda RBX: 00007f9c53b85fa0 RCX: 00007f9c539ce819 [ 102.869161][ T8048] RDX: 0000000000000002 RSI: 0000000020003400 RDI: 0000000000000003 [ 102.877127][ T8048] RBP: 00007f9c52047090 R08: 0000000000000000 R09: 0000000000000000 [ 102.885088][ T8048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 102.893049][ T8048] R13: 0000000000000000 R14: 00007f9c53b85fa0 R15: 00007fffe0c48238 [ 102.901025][ T8048] [ 102.923015][ T8052] loop4: detected capacity change from 0 to 512 [ 102.931738][ T8052] EXT4-fs (loop4): 1 truncate cleaned up [ 102.938375][ T8052] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.985328][ T8051] netlink: 'syz.1.1403': attribute type 1 has an invalid length. [ 103.038600][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.103059][ T8066] FAULT_INJECTION: forcing a failure. [ 103.103059][ T8066] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 103.116178][ T8066] CPU: 1 UID: 0 PID: 8066 Comm: syz.1.1409 Not tainted 6.12.0-syzkaller-07834-g06afb0f36106 #0 [ 103.126514][ T8066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 103.136678][ T8066] Call Trace: [ 103.140087][ T8066] [ 103.143026][ T8066] dump_stack_lvl+0xf2/0x150 [ 103.147626][ T8066] dump_stack+0x15/0x20 [ 103.151786][ T8066] should_fail_ex+0x223/0x230 [ 103.156502][ T8066] should_fail+0xb/0x10 [ 103.160639][ T8066] should_fail_usercopy+0x1a/0x20 [ 103.165671][ T8066] copy_page_from_iter_atomic+0x228/0xf80 [ 103.171406][ T8066] ? shmem_write_begin+0xa2/0x180 [ 103.176499][ T8066] ? shmem_write_begin+0xda/0x180 [ 103.181516][ T8066] generic_perform_write+0x2f1/0x4a0 [ 103.186952][ T8066] shmem_file_write_iter+0xc2/0xe0 [ 103.192087][ T8066] vfs_write+0x77f/0x920 [ 103.196336][ T8066] ? handle_mm_fault+0x170a/0x2aa0 [ 103.201433][ T8066] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 103.207235][ T8066] ksys_write+0xe8/0x1b0 [ 103.211474][ T8066] __x64_sys_write+0x42/0x50 [ 103.216161][ T8066] x64_sys_call+0x287e/0x2dc0 [ 103.220893][ T8066] do_syscall_64+0xc9/0x1c0 [ 103.225536][ T8066] ? clear_bhb_loop+0x55/0xb0 [ 103.230204][ T8066] ? clear_bhb_loop+0x55/0xb0 [ 103.234904][ T8066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.240792][ T8066] RIP: 0033:0x7f1f1c04d2ff [ 103.245193][ T8066] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 103.264791][ T8066] RSP: 002b:00007f1f1a6c0df0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 103.273193][ T8066] RAX: ffffffffffffffda RBX: 0000000000040000 RCX: 00007f1f1c04d2ff [ 103.281151][ T8066] RDX: 0000000000040000 RSI: 00007f1f122a1000 RDI: 0000000000000005 [ 103.289237][ T8066] RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000000004be [ 103.297268][ T8066] R10: 00000000000003c4 R11: 0000000000000293 R12: 0000000000000005 [ 103.305218][ T8066] R13: 00007f1f1a6c0ef0 R14: 00007f1f1a6c0eb0 R15: 00007f1f122a1000 [ 103.313219][ T8066] [ 103.397550][ T8078] FAULT_INJECTION: forcing a failure. [ 103.397550][ T8078] name failslab, interval 1, probability 0, space 0, times 0 [ 103.410260][ T8078] CPU: 1 UID: 0 PID: 8078 Comm: syz.4.1414 Not tainted 6.12.0-syzkaller-07834-g06afb0f36106 #0 [ 103.420594][ T8078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 103.430666][ T8078] Call Trace: [ 103.433952][ T8078] [ 103.436892][ T8078] dump_stack_lvl+0xf2/0x150 [ 103.441575][ T8078] dump_stack+0x15/0x20 [ 103.445745][ T8078] should_fail_ex+0x223/0x230 [ 103.450508][ T8078] ? __alloc_skb+0x10b/0x310 [ 103.455103][ T8078] should_failslab+0x8f/0xb0 [ 103.459711][ T8078] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 103.465524][ T8078] __alloc_skb+0x10b/0x310 [ 103.470078][ T8078] alloc_skb_with_frags+0x80/0x450 [ 103.475203][ T8078] ? cgroup_rstat_updated+0x9f/0x570 [ 103.480486][ T8078] ? __rcu_read_lock+0x36/0x50 [ 103.485241][ T8078] sock_alloc_send_pskb+0x435/0x4f0 [ 103.490660][ T8078] unix_dgram_sendmsg+0x472/0xff0 [ 103.495749][ T8078] ? selinux_socket_sendmsg+0x185/0x1c0 [ 103.501356][ T8078] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 103.506899][ T8078] __sock_sendmsg+0x140/0x180 [ 103.511629][ T8078] ____sys_sendmsg+0x312/0x410 [ 103.516433][ T8078] __sys_sendmmsg+0x227/0x4b0 [ 103.521150][ T8078] __x64_sys_sendmmsg+0x57/0x70 [ 103.526000][ T8078] x64_sys_call+0x29aa/0x2dc0 [ 103.530693][ T8078] do_syscall_64+0xc9/0x1c0 [ 103.535192][ T8078] ? clear_bhb_loop+0x55/0xb0 [ 103.539872][ T8078] ? clear_bhb_loop+0x55/0xb0 [ 103.544617][ T8078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.550506][ T8078] RIP: 0033:0x7f9c539ce819 [ 103.554908][ T8078] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.574745][ T8078] RSP: 002b:00007f9c52047038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 103.583149][ T8078] RAX: ffffffffffffffda RBX: 00007f9c53b85fa0 RCX: 00007f9c539ce819 [ 103.591129][ T8078] RDX: 0307017fdb7a66cb RSI: 0000000020002dc0 RDI: 0000000000000006 [ 103.599164][ T8078] RBP: 00007f9c52047090 R08: 0000000000000000 R09: 0000000000000000 [ 103.607200][ T8078] R10: 0000000000003ec0 R11: 0000000000000246 R12: 0000000000000002 [ 103.615160][ T8078] R13: 0000000000000000 R14: 00007f9c53b85fa0 R15: 00007fffe0c48238 [ 103.623131][ T8078] [ 103.636138][ T8092] random: crng reseeded on system resumption [ 103.789295][ T8117] loop2: detected capacity change from 0 to 1024 [ 103.796205][ T8117] EXT4-fs: Ignoring removed mblk_io_submit option [ 103.814277][ T8121] syzkaller0: entered allmulticast mode [ 103.830684][ T8117] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.830719][ T8121] syzkaller0 (unregistering): left allmulticast mode [ 103.830817][ T8117] ================================================================== [ 103.830842][ T8117] BUG: KCSAN: data-race in data_push_tail / vsnprintf [ 103.830872][ T8117] [ 103.830879][ T8117] write to 0xffffffff88bd6dad of 1 bytes by task 8121 on cpu 0: [ 103.830897][ T8117] vsnprintf+0xdd8/0xe30 [ 103.830916][ T8117] pointer+0x8a1/0xd20 [ 103.830935][ T8117] vsnprintf+0x861/0xe30 [ 103.830952][ T8117] vscnprintf+0x42/0x90 [ 103.830970][ T8117] printk_sprint+0x30/0x2d0 [ 103.830995][ T8117] vprintk_store+0x589/0x870 [ 103.831020][ T8117] vprintk_emit+0x15e/0x680 [ 103.831045][ T8117] vprintk_default+0x26/0x30 [ 103.831075][ T8117] vprintk+0x75/0x80 [ 103.831095][ T8117] _printk+0x7a/0xa0 [ 103.831119][ T8117] __netdev_printk+0x2d1/0x3e0 [ 103.831143][ T8117] netdev_info+0x99/0xc0 [ 103.831172][ T8117] __dev_set_allmulti+0x15b/0x240 [ 103.831191][ T8117] dev_set_allmulti+0x1f/0x30 [ 103.831210][ T8117] packet_notifier+0x28d/0x510 [ 103.831237][ T8117] raw_notifier_call_chain+0x6f/0x1d0 [ 103.831257][ T8117] call_netdevice_notifiers_info+0xae/0x100 [ 103.831285][ T8117] unregister_netdevice_many_notify+0x8b7/0x11b0 [ 103.831312][ T8117] unregister_netdevice_queue+0x1f4/0x220 [ 103.831339][ T8117] br_dev_delete+0xc4/0xe0 [ 103.831359][ T8117] br_del_bridge+0x99/0xc0 [ 103.831379][ T8117] br_ioctl_stub+0x2fe/0x5d0 [ 103.831402][ T8117] sock_ioctl+0x433/0x640 [ 103.831416][ T8117] __se_sys_ioctl+0xc9/0x140 [ 103.831438][ T8117] __x64_sys_ioctl+0x43/0x50 [ 103.831458][ T8117] x64_sys_call+0x1690/0x2dc0 [ 103.831479][ T8117] do_syscall_64+0xc9/0x1c0 [ 103.831500][ T8117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.831519][ T8117] [ 103.831525][ T8117] read to 0xffffffff88bd6da8 of 8 bytes by task 8117 on cpu 1: [ 103.831540][ T8117] data_push_tail+0x102/0x430 [ 103.831563][ T8117] data_alloc+0xbe/0x2c0 [ 103.831584][ T8117] prb_reserve+0x85e/0xb60 [ 103.831611][ T8117] vprintk_store+0x558/0x870 [ 103.831637][ T8117] vprintk_emit+0x15e/0x680 [ 103.831660][ T8117] vprintk_default+0x26/0x30 [ 103.831684][ T8117] vprintk+0x75/0x80 [ 103.831701][ T8117] _printk+0x7a/0xa0 [ 103.831723][ T8117] __ext4_msg+0x18e/0x1a0 [ 103.831746][ T8117] ext4_fill_super+0x980/0x3a10 [ 103.831771][ T8117] get_tree_bdev_flags+0x29f/0x310 [ 103.831794][ T8117] get_tree_bdev+0x1f/0x30 [ 103.831816][ T8117] ext4_get_tree+0x1c/0x30 [ 103.831839][ T8117] vfs_get_tree+0x56/0x1e0 [ 103.831862][ T8117] do_new_mount+0x227/0x690 [ 103.831886][ T8117] path_mount+0x49b/0xb30 [ 103.831909][ T8117] __se_sys_mount+0x27c/0x2d0 [ 103.831925][ T8117] __x64_sys_mount+0x67/0x80 [ 103.831950][ T8117] x64_sys_call+0x2c84/0x2dc0 [ 103.831970][ T8117] do_syscall_64+0xc9/0x1c0 [ 103.831991][ T8117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.832010][ T8117] [ 103.832014][ T8117] value changed: 0x00000000ffffe9d2 -> 0x0000000a65646564 [ 103.832025][ T8117] [ 103.832030][ T8117] Reported by Kernel Concurrency Sanitizer on: [ 103.832038][ T8117] CPU: 1 UID: 0 PID: 8117 Comm: syz.2.1430 Not tainted 6.12.0-syzkaller-07834-g06afb0f36106 #0 [ 103.832060][ T8117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 103.832071][ T8117] ================================================================== [ 104.202195][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.