last executing test programs: 4m28.098816878s ago: executing program 32 (id=157): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) memfd_secret(0x80000) (fail_nth: 10) 4m27.6682365s ago: executing program 3 (id=301): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x14, 0x0, @buffer={0x2, 0x51, &(0x7f00000000c0)=""/81}, &(0x7f0000000280)="409374c9c28aa677ea87a8e369a9c2c033e741d4", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2, {0x15}}, './file0\x00'}) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r3) 4m27.534555701s ago: executing program 3 (id=303): syz_emit_ethernet(0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaa00bbbbbbbbbbbb88a800008100000008004500005880640000002f90787f000001ac1414aa042089060000000400000800000086dd080088be0000000a104d0e7cab0000000100000000000000080022eb00000000200000000200000000000000000000000800655800000000"], 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000880)={[{@errors_remount}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@nojournal_checksum}]}, 0x2, 0x44a, &(0x7f0000000400)="$eJzs281vFOUfAPDvzLbl9+OtFfEFRK0SY+NLSwsqBy8aTTxgNNEDHuu2EMJCDa2JECLVGLyYGBI9G48m/gXevBj1ZOJV74aEKBfQU83MzsDuslsobHcr+/kkA8+z82yf57vPPDPPzLMbwMAaz/5JIrZGxG8RMVrPNhcYr/939fLZ6t+Xz1aTWFl5688kL3fl8tlqWbR835YiM5FGpJ8kRSXNFk+fOT5bq82fKvJTSyfem1o8febZYydmj84fnT85c/Dggf3TLzw/81xX4sziurL7w4U9u15758Lr1cMX3v3p26y9W4v9jXF0y3gW+F8rudZ9T3S7sj7b1pBOhvrYENakEhFZdw3n4380KnG980bj1Y/72jhgXWXXpk2ddy+vAHexJPrdAqA/ygt9dv9bbj2aemwIl16q3wBlcV8ttvqeoUiLMsMt97fdNB4Rh5f/+SrbYp2eQwAANPqs+uWheKbd/C+N+xvKbS/WUMYi4p6I2BER90bEzoi4LyIv+0BEPLjG+luXhm6c/6QXbyuwW5TN/14s1raa53/l7C/GKkVuWx7/cHLkWG1+X/GZTMTwpiw/vUod37/y6+ed9jXO/7Itq7+cCxbtuDjU8oBubnZpNp+UdsGljyJ2D7WLP7m2EpBExK6I2L22P729TBx76ps9nQrdPP5VdGGdaeXriCfr/b8cLfGXktXXJ6f+F7X5fVPlUXGjn385/2an+u8o/i7I+n9z8/HfWmQsaVyvXVx7Hed//7TjPc3tHv8jydv5+WikeO2D2aWlU9MRI8mhPN/0+sz195b5snwW/8Te9uN/R/GeLP6HIiI7iB+OiEci4tGi7Y9FxOMRsXeV+H98ufO+jdD/c23Pf9eO/5b+X3uicvyH7zrVf2v9fyBPTRSv5Oe/m7jVBt7JZwcAAAD/FWn+HfgknbyWTtPJyfp3+HfG5rS2sLj09JGF90/O1b8rPxbDafmka7Theeh0slz8xXp+pnhWXO7fXzw3/qLy/zw/WV2ozfU5dhh0WzqM/8wflX63Dlh37dbRZkb60BCg51rHf9qcPfdGLxsD9JTfa8Pgusn4T3vVDqD3XP9hcLUb/+da8tYC4O7k+g+Dy/iHwWX8w+Ay/mEg3cnv+iUGORHphmiGxDol+n1mAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6I5/AwAA///K8u7c") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a30000000004c00048024000180090001006d65746100000000140002800800014000000001080002400000001724000180090001006d61737100000000140002800800024000000008"], 0xa0}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) mount(0x0, 0x0, &(0x7f0000002000)='devtmpfs\x00', 0x0, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed7f0000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) (async) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdn:Dd', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f0000000940)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000900)={&(0x7f00000003c0)={0x30, r3, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x14, 0x18, {0x400, @bearer=@udp='udp:syz0\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4001}, 0x40) sigaltstack(&(0x7f0000000000)={0x0, 0x80000001, 0x54797c198fc260f8}, 0x0) (async) r4 = gettid() rt_sigqueueinfo(r4, 0x21, &(0x7f0000000ac0)={0x0, 0xc6, 0x8000000}) 4m27.075849934s ago: executing program 3 (id=308): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write(r0, &(0x7f0000000140)="5277b137082e0e49d7fcfa0514cc3ddf17f2ae5581eeb2f321da11bd18bd748e1d54fd5649084118fc1e6b2817fc1d41bdcecb554b32844c1da88c43947f34865d48e55729ddb3de858c3ea8d016947a209f746fdd3e8c36", 0x58) syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x21, 0x6, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0xff}}) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r0, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)=r0}, 0x20) kcmp(r2, r2, 0x0, r1, r3) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r4 = syz_pidfd_open(0x0, 0x0) pidfd_send_signal(r4, 0x21, 0x0, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x80100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) fremovexattr(r6, &(0x7f0000000580)=@known='trusted.overlay.impure\x00') 4m26.953647023s ago: executing program 3 (id=309): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000004c0)={[{@jqfmt_vfsv1}, {@auto_da_alloc}, {@barrier_val}, {@journal_ioprio}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@nodelalloc}, {@acl}, {@noinit_itable}]}, 0xfc, 0x572, &(0x7f0000003780)="$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") r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0x15, r1, 0xffffeffffffffffe, &(0x7f00000003c0)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000003d00)={0x0, 0x0, "a727caec3ba46a94e0ae58aff633497a57562cb1e142b145de27ba80e62d098abff656bcdfc663a39ecd3d4cad93b0fcaf2144cf54255ce221859403beed4c5a3c2d82909df8c6b82e2f35687c58d4e3e3546a583c850fed8dfb8e7075d8cf93582d36de3bf432b27d44c462683d7a818c82379e55d2943655d0a4ed50ac497aae5ceeee679d214da000c2276d4c375f63d3ecd6cca460787a97079eb48a824f22c4eb37a7b6440518d666174a72ccc5ddd32c8e4b41531ba0a4d50426a3b814db9aa6a1e6126fec2e1809db0ab39ef079a06b710113a554be197fb7d42ae07584d65881ec5548e87554c812680bcdaaf6ac8520bbd7b9f232808e442b47cc62", "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"}) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) recvmmsg(r2, &(0x7f0000001cc0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x80, 0x0) add_key(0x0, &(0x7f0000002f40)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1200, 0x30, 0x3) 4m26.821096164s ago: executing program 3 (id=311): r0 = socket$rds(0x15, 0x5, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x4040000) r1 = gettid() bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0xf3a, 0x0) tee(r4, r2, 0xe, 0xa) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, 0x0, 0x0) r6 = fsopen(0x0, 0x0) fsmount(r6, 0x0, 0x6) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@multicast, @empty, @val={@void, {0x8100, 0x4, 0x0, 0x1}}, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @multicast1}, {{0x0, 0x22eb, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d8621b", 0x0, "2c17a9"}}}}}}, 0x0) 4m26.438177612s ago: executing program 3 (id=316): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x1, 0x2a8, &(0x7f0000000500)="$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") r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) renameat2(r2, &(0x7f0000000140)='./file1\x00', r2, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1) 4m26.418289133s ago: executing program 33 (id=316): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x1, 0x2a8, &(0x7f0000000500)="$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") r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) renameat2(r2, &(0x7f0000000140)='./file1\x00', r2, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1) 4m22.68084584s ago: executing program 6 (id=317): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x110, &(0x7f0000000340)={0x0, 0x6d89, 0x8, 0x0, 0xf0}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x4000, @fd, 0x0, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r1, 0x8aa, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x2, 0x1000000, &(0x7f0000000080)={0x77359400}, 0x0) 4m21.770486457s ago: executing program 6 (id=360): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) pidfd_send_signal(r1, 0x2, 0x0, 0x0) 4m21.640506198s ago: executing program 6 (id=361): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@generic={&(0x7f00000001c0)='./file0\x00', 0x0, 0x18}, 0x18) r2 = socket(0x1e, 0x4, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x1, @perf_config_ext={0x0, 0x1}, 0x8002, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7816, 0x2, 0x0, 0x81, 0x801ff, 0x1, 0x1}, 0x1c) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000006c0), &(0x7f00000000c0)='./file0\x00', 0x40, &(0x7f0000000780)=ANY=[@ANYBLOB='nfs=stale_rw,dots,nodots,dots,nodots,dots,dots,nodots,nodots,dots,dots,nodots,nodots,check=relaxed,flush,usefree,dots,dots,nodots,errors=continue,\x00'], 0x1, 0x1f3, &(0x7f0000000300)="$eJzs3cFqE1EUANCbmiYTcdGdIAgjLnRV1C+oSAUxIFSy0J2gK7NqN6mb9jP8Bf/LD5CuspEncSadGNMYBjKj9ZxN78x9r+/dGTLJJjcpCl9vf44s68TOQRzEtBN7sRNz5wEAXCfTlOJbKrS9FwCgGRu8/39veEsAwJa9fvP25dPh8PAoz7OIi/PJaDIq/hb55y+Gh4/ynzrVrIvJZHTjMv84X/7sMMvvxs0y/6SYn1+mexEx6sXD+0V+lnv2apj/Or8f77dcOwAAAAAAAAAAAAAAAAAAAAAAtOVu5HN71dmqv8/+/nJ+UOaLo4X+QEv9e7pxp1seVu2B0lkTRQEAAAAAAAAAAAAAAAAAAMA/5uT008d34/GH4yroR8Time6KMVcHnfIfbzS4/WAn6k0flGXWWLRTXqLtFjhYfXM3CaL7t9ydukHewFqDtZc3pVmw+lUwb4tx5fReRKxf/cFR3c1PU0rjL/eOT04jrR1cPSP6jT6RAAAAAAAAAAAAAAAAAADg/7Xwre/fZG1sCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABaUP3+f43gLCJuxR8Hz9fajazdYgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALi2fgQAAP//+EUj2A==") truncate(&(0x7f00000009c0)='./file0\x00', 0x1) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r3, 0xc0406619, 0x0) sendmmsg(r2, &(0x7f00000042c0)=[{{&(0x7f0000000500)=@sco, 0x80, &(0x7f0000000700)=[{&(0x7f0000000580)="32c6dd984ca4cc", 0x7}, {&(0x7f00000005c0)="fafb4707f7ea8709ecf27c662336c180fc8f62c874790f4070893093f1986708b68496d0183208f57e8bdac1e57678305183bfd6e9ae3b96cac4f76028853106ac0b01283c16dac0476e280c86470559e1be5230aa72879902313b16e22e73bbc0a960b5815f12aa8a39ed3f978773646075347821370ef4d52ce4a8e85f4f03e1eff07ac03e4337ce8692cbc0e92ab246ba5ecf5530bc1a7431a5d5ecaa54481adff32e53ca237808f4e91ff5904153408b4ad6fb07328395d592efc3165d8d384be38a110ffc2e58f23746cfe41028440d5911bac5", 0xd6}], 0x2, &(0x7f0000000a00)=[{0x1010, 0x117, 0x2000000, "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"}, {0x18, 0x1, 0x3, "837df4f9"}, {0xc8, 0x112, 0xff, "e034382b1c5681d593a8d532df1146b46d499fbc7111c0b0be39fbdbfac144bc2dbf3396752c5089f6323acdfcb3a84cf0c97d0190dff842471bf520b475447fa56994b1fd0de768eedb1127490ad0e82f297afe8e952a06fb4ef3a511fc1224b3f13516fde010c417d12a86f8111a73e5530607be86df41517e63afb81f9c6737a8b72e327f9e113c8b678f8ed2eb389260e5bcb735e915461095f37313be8102660c03c30e2d19dd036dd38bcd21904ddc"}, {0xe0, 0x102, 0x2, "1d167a5d59a97338c5cebcf24c838e4ef36b7f12c32e8ee4e92524efade0807b01a6aad59dca9d078fb4db8f3c6d0f1cd8579c83fc5f2929c68af3103107d1b9c31ff530bfd25cecaf9186de18b675514a4bfbde11cd77a8764027bfab1eb903dc6bca70a8706d106ec34256ffb7c161af1697d59b454b480eb5c365ab0d2eb459e61e126036f2b3d1bd18fdcd72f87c7e7271fe72567fd48d7ef7633c97ab1a3e7cb66af188c891ad731674c7b566b202358e336a19654172aff2d57a566589bd8c23b9255ea4d98d65e4c309"}, {0xb0, 0x6, 0x0, "2b1a4a7a6d2d201e534840c97fc60cc5f8a3aa04771bdd9101b0f9ec1a28c969d70ccfe06f5f3680f60dc7b014147f1a3d8c5a6d0e1f2c8d341c353fa9223278461a2c26ae400472fc794ce51d444a851c1bae2fb3fa4eafbe5df5e269867918859ea481d9d81145f07d81e05bfed6938924ec9d4462e5acfbdcc0fa56ebf65c37611024237fc23e87cd748b20aef0678365c66fd06728fda2ba2ea816a3a7f0"}, {0x48, 0x101, 0xb9, "f61254492bdee0e25911acd307b9dd63120c45bc4567a6900c2f42554b2e5fa6a9298ead01aa2026cd961ba8f1cfabc555"}, {0xd8, 0x0, 0x6, "77aa6e2ff5c2c9e045b5cb69e12da277090dd5ad55a1bab63e9c1bd580d9e4be79b279bdd574617b45879409268c94772bee3b776a447e55a2f0fe9ef9f81d2cd9a32563ea213026a97a9b23a10af657489b69f31bb71cd206f97fded8d0bed84b299b54def6d854b2175756b88d3dced65e340caccbdafc806f3162bfc4a76d616e405f5bee6c4a87469e7ba7efad64de6781cb5e817a5c2e5d9fef72bafad3b2ca12561e53005e2e21061d0370a60d1132f24c864e4f3dd550a989b61db0e8a3ff"}, {0x1010, 0x10b, 0x7, "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"}], 0x23b0}}, {{0x0, 0x0, &(0x7f0000004180)=[{&(0x7f0000000840)="2fcd5fbdc9bc02a943ffa7e6399049205cc6fc7ed86b62f71a1fc0fbc1aff0f6e3ec3f49c2a92ad2375d18520ba8b09371cc7f7eb5f761f2024535cbc8a941aab535a02ec6c7fa3d21c24506d144", 0x4e}, {&(0x7f00000008c0)="08d632cf80e3222bf8e0bd6eb01f56591be8a447987334173339b54fed632408a29e3bb23c616331ea9d645d35b5b8d804b2b2a1cfd0cceef4923739ea9645b4f7799e9529f4c3538d889545572bfdb939ec3e5a15ad9ac4d076ae0c3b7f4b399b6e139083022d628a9e5137be7290177c16a155e1c3e7494112842f6e0b826e98914a688a205a04173a19cec0f4a680aa10b719c13a8e360eb6d0e0b282f5ab30b8d85ead5f0423ccccfba4604a2e0aaf39f5d5189c52c03c0965a3f1a5281e73a9060ae96c4f", 0xc7}, {&(0x7f0000002dc0)="1a7ae97be1faa1d8ac6c625ba6e4c7c8b61a5d917afd8a103c6913ece28ca9cbb1aab249d770bcf5c7467974a7eec1ea5ad6d755cb67b3ef4c84641dc58fe18123f60fd8483e62f6d4ca7ffa043ca21c62194e4d29610b0ff718141b73c263fabe6ca09fbe4960989d79ade8a699f9ab16376b1590cb565754386c422941e6df5bceb0da3809d4fa8483caf7a7af57cb1b5635131f5be75c1545b597bfa92aaed94e5fb59eaa3d26410cc45eca", 0xad}, {&(0x7f0000002e80)="04044d42321c324c405ea9cfae9318d05b535237ba32ed8db8fcc0d765625c26ec6da719c5c6a447860dd3d3e1dbd29ff6ad9acdf27c5365a7f4018cfe08a2135d644ea5b45362d7a55b9bdb2168e6aa0fb1cf628773dac3d67d39db793dcc9d28bb4bf9b270212da2dca942358eb04d0a21eb70e9ad38108e5747aa17f705a41fc511cd7f2b2435036c88fab5523fc42fa28c2585", 0x95}, {&(0x7f0000002f40)="b808860d60c536c7bab33f2f340e3be1ce3f2d771523fc9dde120a443115a055d2a042e752d1dab606661d33118bc8de4e94db9feaebcec474c07915cbc66b841e1b33aa63ec86edb09f20dfa140e007c90567ec22a08f1539cb758c6d3a448ca3aeb9e9aff2e3dffdc7b283be414978d9", 0x71}, {&(0x7f0000000740)="8fb511bef23aba061a37cee4ed0f2f75bea226500a45ea97ecb2ab8b23e1f1832af2eaf26b4398", 0x27}, {&(0x7f0000002fc0)="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", 0xff}, {&(0x7f00000030c0)="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", 0x1000}, {&(0x7f00000040c0)="26593df2a52a3fda6d53a842186326c6807456b9cb029161cfa5e8405079eff2ce4fbc19e3760fa71ca22ecd287940017e448e2101c342be4d2f4990cd30fe56beea654d5df94cadca243419f0c797d4d66ce21f8cc85131ca48605954bb10c0e8f84a064bba34c4f3b80961208cee5388bd1fa0f7c274ab3521c0ccb1216ec7c4fc1160003d482ba90f9277b4385d0edd8d0713463dc7a09dce6a070de104027ac91b6470", 0xa5}], 0x9, &(0x7f0000004240)=[{0x60, 0x111, 0x2, "0cb72b81af09b45f8c714d33eeabf2e1b642ef14f80d10585202a153f129b066238e243e3b5e87ba2277ef5311baef47d698b872b994db02691b940e93d73e04e1384c6b297273be9d11d1"}], 0x60}}], 0x2, 0x40000) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000004340)={0x1ff, 0x7, 0x9, 0x400009, 0x11, "56ebaf2069a06a05f2e81224ccca7d2e1b45fd"}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000180), &(0x7f0000000240)=r1}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r5}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$netlink(r6, 0x10e, 0x8, &(0x7f0000000000)=""/128, &(0x7f0000000080)=0x80) 4m21.361577228s ago: executing program 6 (id=364): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xa8, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f005dd1be0ffff00fe3a21632f77fbac14141de007031762079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc04308", 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0}, 0x50) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x94) 4m18.084654761s ago: executing program 6 (id=400): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a00000006000100350000000883b70391203b16b67b24869106bb5fa7f1e5ea75b43cdb387895d0bee664bdb5"], 0x1c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1) 4m18.070861622s ago: executing program 34 (id=400): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a00000006000100350000000883b70391203b16b67b24869106bb5fa7f1e5ea75b43cdb387895d0bee664bdb5"], 0x1c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1) 4m2.879035428s ago: executing program 2 (id=601): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x82200, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) mknod(&(0x7f00000007c0)='./file1\x00', 0x8001, 0x34ca) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0) r3 = open(&(0x7f0000000400)='./bus\x00', 0x42202, 0x0) splice(r2, 0x0, r3, 0x0, 0x114, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x481, 0x0) vmsplice(r4, &(0x7f0000000340)=[{&(0x7f00000004c0)="4267c10b", 0x4}], 0x1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fc0f00000a"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000a00)=ANY=[@ANYRES64, @ANYBLOB="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", @ANYRESDEC=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000200)={@private2, 0x0}, &(0x7f0000000600)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', r8, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000840)='selinux_audited\x00', r7}, 0x48) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000680)='./bus\x00', &(0x7f00000006c0), 0x0, &(0x7f0000000dc0)=ANY=[@ANYRESOCT, @ANYRESOCT=0x0, @ANYRESHEX=r9, @ANYRESHEX=r6, @ANYBLOB="2c756e616d653dd0aedec1aa20ffd81d1bf89329217cb058a396eda2ab40a26d93dd083c0074dcab6cab21ae16c4cdf97bdc355f3b41d27b654301345cb3c4cec37953322d01beaa7257964fd30fe2d72f171da72e389f382dea3c8d91906aead5d5aeccc097ef1092ea987c2b00000000000000002c00"]) bpf$MAP_CREATE(0x0, &(0x7f0000003100)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_clone3(&(0x7f00000008c0)={0x95340580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10}, 0x10) semctl$GETZCNT(0x0, 0x0, 0xf, 0x0) 4m2.85535598s ago: executing program 2 (id=602): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000020000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000007290000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x1c, 0x12, &(0x7f0000001500)=ANY=[@ANYBLOB="18000000020000000000000040000000850000007400000018120000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000950000000000000018200000", @ANYRESDEC=r2, @ANYBLOB="00000000c7d13d4407a0f7b133d81e3e153d09000000185200000700", @ANYRES32, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x81, 0xff5, &(0x7f00000002c0)=""/4085, 0x41100, 0x12, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, &(0x7f00000012c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001300)={0x3, 0xf, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000001340)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001380)=[{0x0, 0x1, 0x3, 0x4}, {0x1, 0x3, 0xa, 0xa}], 0x10, 0x8, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x20000000, @void, @value}, 0x94) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r4, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r7, 0x2405, r6) bind$inet(r5, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) r8 = accept$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000001480)) setsockopt$nfc_llcp_NFC_LLCP_RW(r8, 0x118, 0x0, &(0x7f00000014c0)=0x2, 0x4) r9 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r10) setregid(r10, r10) r11 = socket(0x10, 0x3, 0x10000000) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x3e) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c0000", @ANYRES32=r11], 0x30}}, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0xd6e}}) 4m1.791699519s ago: executing program 2 (id=625): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x82200, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) mknod(&(0x7f00000007c0)='./file1\x00', 0x8001, 0x34ca) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0) r3 = open(&(0x7f0000000400)='./bus\x00', 0x42202, 0x0) splice(r2, 0x0, r3, 0x0, 0x114, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x481, 0x0) vmsplice(r4, &(0x7f0000000340)=[{&(0x7f00000004c0)="4267c10b", 0x4}], 0x1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fc0f00000a"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000a00)=ANY=[@ANYRES64, @ANYBLOB="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", @ANYRESDEC=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000200)={@private2, 0x0}, &(0x7f0000000600)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', r8, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000840)='selinux_audited\x00', r7}, 0x48) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000680)='./bus\x00', &(0x7f00000006c0), 0x0, &(0x7f0000000dc0)=ANY=[@ANYRESOCT, @ANYRESOCT=0x0, @ANYRESHEX=r9, @ANYRESHEX=r6, @ANYBLOB="2c756e616d653dd0aedec1aa20ffd81d1bf89329217cb058a396eda2ab40a26d93dd083c0074dcab6cab21ae16c4cdf97bdc355f3b41d27b654301345cb3c4cec37953322d01beaa7257964fd30fe2d72f171da72e389f382dea3c8d91906aead5d5aeccc097ef1092ea987c2b00000000000000002c00"]) bpf$MAP_CREATE(0x0, &(0x7f0000003100)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_clone3(&(0x7f00000008c0)={0x95340580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10}, 0x10) semctl$GETZCNT(0x0, 0x0, 0xf, 0x0) 4m1.791089968s ago: executing program 2 (id=627): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240)={[{@grpquota}, {@noquota}, {@minixdf}]}, 0x1, 0x50c, &(0x7f0000000ac0)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x3, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x4}, 0x18) r1 = open(&(0x7f0000000480)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000240)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x0, 0x0, 0x0, 0x0, 0xf001}, {0xffffffff}]}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000308ed14000000000000000000000000050003000600000006000240000000003c0004"], 0x60}}, 0x0) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x3) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) syz_clone3(&(0x7f00000008c0)={0x15140100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 4m1.682718527s ago: executing program 2 (id=630): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e22, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}]}, &(0x7f0000000440)=0x10) 3m53.965340069s ago: executing program 2 (id=732): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @mcast2, @local, {[], {{0x4, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0x2}}}}}}}, 0x0) 3m53.922912172s ago: executing program 35 (id=732): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @mcast2, @local, {[], {{0x4, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0x2}}}}}}}, 0x0) 3m14.844307858s ago: executing program 1 (id=1532): r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x9, &(0x7f0000000b80)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = open_tree(0xffffffffffffff9c, 0x0, 0x81800) move_mount(r2, 0x0, 0xffffffffffffff9c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES64=r1, @ANYRES32=r0], 0x0, 0xcbf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1000, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e24, 0x8, @remote, 0x3}, 0x1c) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2d, '\x00', 0x0, @fallback=0xb, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) r7 = socket(0x10, 0x3, 0x0) bind$netlink(r7, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r7, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r7, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) write(r7, &(0x7f0000000580)='*e', 0x2) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 3m13.927752226s ago: executing program 1 (id=1546): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r0, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) socket(0x1f, 0x1, 0x6) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x1c, r2, 0x331, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) getpid() 3m13.87040335s ago: executing program 1 (id=1547): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\n\x00\x00\x00 \x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="bc0100001900010000000000000000bc6f0cf8bb20270c000000000000000000ac1414bb00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004010500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb000000003c00000000000000fe8000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000aa00000000330000000000000000000000000000000000ffff000000000000000000000000000000000000000000000000fe880000000000000000000000000001000000006c00000000000000ff01000000000000000000000000000100"/372], 0x1bc}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r3 = socket(0x10, 0x803, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x60, 0x2c, 0xd27, 0x30bd29, 0x2, {0x0, 0x0, 0x0, r6, {0x8, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xff8b, 0x3, 0x8}, {0x9, 0x6, 0x1, 0x800}}}]}]}]}}]}, 0x60}}, 0x0) 3m13.854930422s ago: executing program 1 (id=1548): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x800, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c00000006000000000000000100000d030000000000000003000000000000000000000604000000040000000000001202000000000000005f"], 0x0, 0x4a, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f000001f8c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000f00)={0x1d, r4, 0x2, {0x0, 0x1, 0x2}, 0x1}, 0x18) bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r4, 0x0, {0x1, 0xf0, 0x8}, 0xfe}, 0x18) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)={0x1c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x4000014}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r5 = add_key$keyring(&(0x7f0000000200), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000080)=@chain) add_key$keyring(&(0x7f0000000300), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001f00)=@raw={'raw\x00', 0x3c1, 0x3, 0x270, 0x1250, 0x5802, 0x294, 0x0, 0x294, 0x1380, 0x325, 0x378, 0x1380, 0x378, 0x3, 0x0, {[{{@ipv6={@loopback, @empty, [], [], 'pimreg0\x00', 'macsec0\x00'}, 0x0, 0xa8, 0xd0, 0x52020000}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0xfff7}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2d0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0, 0x0, 0x57, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffecd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r7}, 0x10) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f00000003c0)) process_vm_writev(r8, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r9, 0x560a, &(0x7f0000000040)={0x0, 0x6, 0x8, 0x2, 0x0, 0x3}) open(&(0x7f0000000040)='./bus\x00', 0x4e142, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 3m13.74055605s ago: executing program 1 (id=1551): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000a50000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) msgrcv(0x0, 0x0, 0x0, 0x0, 0x800) ioperm(0x0, 0x7ffffffd, 0x3a4) r2 = openat(0xffffffffffffff9c, 0x0, 0x141042, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18010000000000000000000000008226642c57604e2f3c7f5d", @ANYRESOCT=r2, @ANYRESOCT=r2, @ANYRES16=r2], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400, @void, @value}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000004c0)='kfree\x00', r4, 0x0, 0x1}, 0x18) r5 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000580)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x46, @local, @mcast1, 0x80, 0x0, 0x6, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) r6 = syz_clone(0x80000100, 0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f00000003c0)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) r8 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x23, &(0x7f0000000000)=@security={'security\x00', 0xe, 0x4, 0xa, 0xffffffff, 0x1d8, 0x1d8, 0x108, 0xffffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, [], [], 'macvtap0\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) mincore(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0) waitid(0x1, r6, &(0x7f00000002c0), 0x1000000, &(0x7f00000004c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$UHID_CREATE(r2, &(0x7f0000000700)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000640)=""/151, 0x97, 0xc, 0xf1000, 0x7, 0x8, 0xfffffffc}}, 0x120) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 3m13.499138108s ago: executing program 1 (id=1555): syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff020000000000000000000000000001"], 0x0) 3m13.484101999s ago: executing program 36 (id=1555): syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff020000000000000000000000000001"], 0x0) 1m18.613322733s ago: executing program 5 (id=3976): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000100)=0xa9b, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) write(r1, &(0x7f0000000200)="89", 0xffe3) (fail_nth: 2) 1m18.5226957s ago: executing program 5 (id=3977): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 1m18.51808667s ago: executing program 5 (id=3979): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x3ed05f89, 0x3, 0x5, 0x2, 0x4810}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1m18.448599735s ago: executing program 5 (id=3980): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = timerfd_create(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) timerfd_gettime(r0, &(0x7f0000000040)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r3}, 0x10) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r4) 1m18.210214963s ago: executing program 5 (id=3986): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1001, 0xb) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181100e532b46446c7d1c8692bbc7e6ec9092593caf67ff1e33c85f365877ee3ef942696d03014984afd6a531a54d91a149146179c87befd481fe8d3ac22344cfebd2953eadd", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa5400008500000082"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r1}, 0x18) close(r0) 1m17.999658438s ago: executing program 5 (id=3988): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r1, 0xffffffffffffffff, 0x4000000}, 0x57) 1m17.954411462s ago: executing program 37 (id=3988): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r1, 0xffffffffffffffff, 0x4000000}, 0x57) 2.946480781s ago: executing program 7 (id=5227): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x3) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f000000e0c0), 0x10010) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000b00)=@ccm_128={{0x303}, "0000090800000003", "73b59657269ef929ee540a8a0a86c5d0", "6362dfd5", "21be0dd9f7f3c312"}, 0x28) sendfile(r0, r3, &(0x7f0000000100)=0x10, 0x10001) (fail_nth: 2) 2.931379663s ago: executing program 8 (id=5228): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) 2.637946644s ago: executing program 7 (id=5231): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x2, &(0x7f0000002400)=0x0) io_submit(r2, 0x0, &(0x7f0000000340)) 2.637561384s ago: executing program 8 (id=5232): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r1, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x0) 2.578573009s ago: executing program 8 (id=5235): r0 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r4, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x68, 0x30, 0x829, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0x10000000}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x4010) 2.576235509s ago: executing program 4 (id=5236): perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_GET_FP_MODE(0x2e) write$evdev(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0xea60}, 0x3, 0x3, 0x5}], 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0xc02) ioctl$EVIOCSABS2F(r0, 0x401845ef, 0x0) (fail_nth: 3) 2.508805274s ago: executing program 7 (id=5238): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1810410, &(0x7f0000000380), 0x4, 0x4fe, &(0x7f0000000a40)="$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") mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xdc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) r3 = gettid() rt_sigqueueinfo(r3, 0x21, &(0x7f0000000000)) 2.508711704s ago: executing program 4 (id=5239): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000380)=@generic={0x0, r0}, 0x18) 2.508063084s ago: executing program 4 (id=5240): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e21, 0x0, @loopback, 0x1}}, 0x24) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setreuid(0x0, 0xee00) bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x2, &(0x7f0000002400)=0x0) io_submit(r3, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 2.345944746s ago: executing program 4 (id=5241): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000e5ff1a120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0x100}, 0x18) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r3 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x6d33, 0x1000, 0x0, 0x4000000}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.218187826s ago: executing program 4 (id=5242): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0006, &(0x7f0000001380)={[{@delalloc}, {@dioread_nolock}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x53}}, {@noload}, {@usrjquota}, {@usrjquota}]}, 0xfe, 0x453, &(0x7f0000000e00)="$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") 2.053283328s ago: executing program 7 (id=5243): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) 1.675499015s ago: executing program 0 (id=5244): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c250000002020207b1affff00000000bfa10000000000000500000000000000b702000008000000bc03000000000000850000002d00000095000000000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x8440, &(0x7f00000001c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@grpquota}, {@noload}, {@abort}, {@lazytime}, {@usrquota}, {@resgid}, {@bh}]}, 0x1, 0x58d, &(0x7f00000005c0)="$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") r1 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x22) r2 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000180)='rxrpc\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, r2) pwritev2(r1, &(0x7f0000000440)=[{&(0x7f0000002ec0)="fb", 0x1}], 0x1, 0x7800, 0xfffffffd, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000280)='netlink_extack\x00', r3}, 0x10) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000000000)='./file0\x00', 0xc012, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x1, 0x1236, &(0x7f0000002f80)="$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") socket$kcm(0x2, 0x1, 0x84) (async) r4 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x9, &(0x7f0000000380), 0x98) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r6, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba0700000000ebffffff0000f77fff00"}) (async) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba0700000000ebffffff0000f77fff00"}) syz_open_pts(r6, 0x0) (async) r7 = syz_open_pts(r6, 0x0) dup3(r7, r6, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r8 = socket$netlink(0x10, 0x3, 0x0) write$tcp_mem(r4, &(0x7f00000004c0)={0x10, 0x20, 0x0, 0x20, 0x33}, 0x48) sendmsg$nl_route(r8, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006600ff"], 0x20}}, 0x0) (async) sendmsg$nl_route(r8, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006600ff"], 0x20}}, 0x0) write$selinux_user(r1, 0x0, 0x27) (async) write$selinux_user(r1, 0x0, 0x27) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000280000000000000", @ANYRES32=0x1, @ANYBLOB="00e0a18bad81ca86f9fc00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/13], 0x48) 1.509226398s ago: executing program 4 (id=5245): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x549, &(0x7f0000001800)="$eJzs3c9vI1cdAPDvTH65222zCz1ABewChQWt1t5421XVS8sFhKpKiIoD4rANiTcKseMQO6UJkUj/BpBA4gR/AgckDkg9ceDGEYkDQpQDUoEItEHiYDRjJ+smNmtqx+7Gn480O/Pmzfj7nrMz7/k5mRfA1LoeEUlEzEfEGxGx2NmfdJZ4pb1kxz043F85OtxfSaLVev3vSZ6f7YuuczJPRsRBRBQi4utfifh2cjZuY3dvY7larWx30qVmbavU2N27tV5bXqusVTbL5btLd2+/eOeF8sjqeq32i/e+vP7qN379q0+++7uDL34/K9blTl53PUapXfW5kziZ2Yh49TyCTcBMZz0/4XLwwaQR8ZGI+Ex+/S/GTP6/EwC4yFqtxWgtdqcBgIsuzcfAkrQYEWna6QQU22N4z8SltFpvNG/er+9srrbHyq7EXHp/vVq5fXXhD9/ND55LsvRSnpfn5+nyqfSdiLgaET9aeCJPF1fq1dXJdHkAYOo92d3+R8S/FtK0WBzo1B7f6gEAj43CpAsAAIyd9h8Apo/2HwCmzwDtf+fL/oNzLwsAMB4+/wPA9NH+A8D00f4DwFT52muvZUvrqPP869U3d3c26m/eWq00Noq1nZXiSn17q7hWr6/lz+ypPer1qvX61tLzsfNWqVlpNEuN3b17tfrOZvNe/lzve5W5sdQKAPhfrl575/dJRBy89ES+RNdcDtpquNjSER4FPF5mhjlZBwEea2b7guk1UBOedxJ+e+5lASaj58O8Cz033+8n/0cQv2cEHyo3Pj74+L85nuFiMbIP0+uDjf+/PPJyAONn/B+mV6uVnJ7zf/4kCwC4kIb4Fb7WD0bVCQEm6lGTeY/k+38AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4YC5HxHciSYv5XOBp9m9aLEY8FRFXYi65v16t3I6Ip+NaRMwtZOmlSRcaABhS+tekM//XjcXnLp/OnU/+vZCvI+J7P339x28tN5vbS9n+f5zsXziePqz88Lwh5hUEAAb350EOytvvcmfd9UH+weH+yvFyjmU8470vnUw+unJ0uJ8v7ZzZaLVarYhC3pe49M8kZjvnFCLi2YiYGUH8g7cj4mO96p/kYyNXOjOfdsePTuynxho/fV/8NM9rr7O376MjKAtMm3ey+88rva6/NK7n697XfyG/Qw0vv/8VIo7vfUdd8Wc7kWZ6xM+u+euDxnj+N189s7O12M57O+LZ2V7xk5P4SZ/4zw0Y/4+f+NQPX+6T1/pZxI3oHb87VqlZ2yo1dvdurdeW1yprlc1y+e7S3dsv3nmhXMrHqEvHI9Vn/e2lm0/3K1tW/0t94hd61n/+5NzPDVj/n//njW99+mFy4XT8L3y298//mZ7x27I28fMDxl++9Mu+03dn8Vf71P9RP/+bA8Z/9y97qwMeCgCMQWN3b2O5Wq1sD7WRfQodxeuc2ciKONjBx93F4YL+KfKNEb0tfTayztggB8+d17t67huzJ33F0b7yN7NXHHN10pHXYqiNB+OKNbl7EjAeDy/6SZcEAAAAAAAAAAAAAADoZxx/ujTpOgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBx/TcAAP//HnrDTQ==") 1.285514554s ago: executing program 7 (id=5248): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5c9, &(0x7f0000001000)="$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") 1.21844157s ago: executing program 0 (id=5249): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x20000, 0x4) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/5, 0x204000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="030729bd0100000000000000000005000d0026000000060006000200000008000500ffffffff"], 0x2c}, 0x1, 0x0, 0x0, 0x4000044}, 0x48001) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000008c0)='sys_enter\x00', r6}, 0x10) (async) setxattr(0x0, 0x0, 0x0, 0x0, 0x1) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r7}, 0x10) (async) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x80a, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000040)=0x4000, 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007645d0000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r8}, &(0x7f00000004c0), &(0x7f0000000500)='%-5lx \x00'}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r10, 0x1, 0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) (async) bind$xdp(r0, &(0x7f00000002c0)={0x2c, 0x4, r2}, 0x10) 1.107000208s ago: executing program 9 (id=5250): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000100)='kfree\x00'}, 0x18) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) flistxattr(0xffffffffffffffff, &(0x7f00000002c0)=""/184, 0xb8) unshare(0x8020480) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x57) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000010a850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) io_cancel(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) write$selinux_attr(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) 1.049493592s ago: executing program 8 (id=5251): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x186) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x811}, 0x4001) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3, 0x0, 0x200}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1e00000004000000030000004e00000000000000", @ANYRES32, @ANYBLOB="0900000000000000000000000000810000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000001000000020000000a00"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x200000000006, 0x2, 0x4, 0x7ffc1ffb}]}) r5 = msgget(0x1, 0x600) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) msgctl$MSG_INFO(r5, 0xc, &(0x7f0000000280)=""/117) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x235, &(0x7f0000000300)="$eJzs3T9oFFkcB/Df7J/LJVmO3F1zcHAniIgGQuwEm9goBCSIiKBCRMRKEiUmbWJlY6G1SiqbaGu0FJtgExGsgqaIjaBBxGChxcrsJBLNiuLGHXE+H5jdmd335veGme/bbYYJoLB6ImIgIsoR0RsR1YhI1jfYki09q5vTnXPDEfX6oVdJo122nVnr1x0RUxGx+2Y9U4mYmD229HZh//ZL49VtN2aPdrb1IFctLy0eWLk+dPH24K6Jh49fDCUxELVPjmvzJU0+qyQRf/2IYj+JpJL3CPgW5+aHXqe5/zsitjbyX41SZCfv8thv96ux89qX+l55+ejfdo4V2Hz1ejX9DZyqA4VTiohaJKW+iMjWS6W+vuw//JNyV+nM6Nj53tOj4yOn8p6pgM1Si1jcd7fjTvdn+X9ezvIP/LrS/B8+OPM0XV8p5z0aoJ3S/PeemNwR8g+FI/9QXPIPxSX/UFzyD8Ul/1Bc8g/FJf9QXPIPxSX/UFzr8w8AFEu9I+87kIG85D3/AAAAAAAAAAAAAAAAAAAAG013zg2vLe2q+eBqxPLeiKg0q19uPI844vfGa9ebJG32UZJ1a8nx/1vcQYtu5Xz39R/P8q0//1++9SdHIqYuRER/pbLx+ktWr7/v9+dXvq+ebLFAi/Ycybf++5l86w8uRNxL55/+ZvNPKf5pvDeff2rp+Wux/tl3Le4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAtvkQAAD//4XCc8o=") r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r7, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x4080080) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYRES64=r6], 0x0, 0x2, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f00000005c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0xb, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r10}, 0x10) socket$unix(0x1, 0x1, 0x0) 829.287548ms ago: executing program 9 (id=5252): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) syz_open_dev$sg(&(0x7f00000001c0), 0xf7d, 0x101200) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x40010122) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000080654d970008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8918, &(0x7f0000000000)={r2}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='kmem_cache_free\x00'}, 0x10) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file2\x00', 0x4204, &(0x7f0000003240)=ANY=[], 0x2, 0x334, &(0x7f0000002900)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) sendfile(r3, r3, 0x0, 0x7a680000) 828.267559ms ago: executing program 7 (id=5253): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c00000010004b0422000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000800150000000000050016"], 0x4c}, 0x1, 0x0, 0x0, 0x200400a0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="000000000400fe00b70500000800004cd6c0595f483000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0xbd, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, @void, @value}, 0x94) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f00000004c0)={0x2, {0x2, 0x2, 0x2, 0xf1, 0x8f, 0x2}}) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x4, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x0, 0x6, 0xf, 0x2}, {0xe, 0xd, 0x2, 0x9}]}) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x2, 0xf, &(0x7f0000000400)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r4, &(0x7f0000004200)='t', 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="050000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendfile(r4, r3, 0x0, 0x3ffff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x842, 0x0) pwrite64(r5, &(0x7f0000000080)='=', 0x1, 0x800b5eb) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) 723.588126ms ago: executing program 8 (id=5254): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000fb"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000a00)=0x9, 0x12) fcntl$lock(r2, 0x7, &(0x7f00000003c0)={0x1, 0x1, 0xb, 0xfffffffffffffffd}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@ipv6_newrule={0x38, 0x18, 0x409, 0x0, 0xfffffffd, {0xa, 0x0, 0x10}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}, @FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x38}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX, @ANYRES16=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$AUDIT_DEL_RULE(r2, &(0x7f00000009c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)={0x42c, 0x3f4, 0x100, 0x70bd2a, 0x25dfdbfe, {0x3, 0x2, 0x30, [0x7f, 0x2, 0x8, 0x2, 0xa22e, 0x5, 0xffff7fff, 0xe, 0xfff, 0x401, 0x5, 0x4, 0x6, 0x9, 0xfff, 0x80000000, 0x3, 0x283e, 0x3, 0x1000, 0x8, 0x0, 0x8, 0x4, 0xff, 0x6, 0x2, 0x4, 0x9, 0x5, 0x2, 0x5, 0x1, 0x201, 0x6, 0x6, 0x9, 0x2, 0xb2, 0xe07, 0xfff, 0x8, 0xffff, 0xa, 0x0, 0x6, 0x0, 0x200, 0x0, 0x80, 0x8000, 0x6, 0x2, 0x2, 0x1000, 0x8, 0xfffffffb, 0xfff, 0xffffffff, 0x89, 0x3, 0x1, 0x7, 0x6], [0x9, 0x5, 0xf36d, 0x9, 0x9, 0x1, 0x1000, 0x2, 0x7fff, 0x6, 0x3, 0x80, 0xa, 0x2, 0xfc000000, 0x5, 0x401, 0xe8d, 0x4, 0x1, 0x8000, 0x52ca, 0x7, 0x10001, 0x0, 0x3, 0x3, 0xfffffffc, 0x0, 0x4, 0x6, 0x40, 0x1, 0x6, 0x4, 0x1, 0x1, 0x1, 0xe, 0x7fffffff, 0x5d78, 0x8, 0x4, 0x2, 0x6, 0x3, 0x2e15, 0x0, 0x101, 0x7, 0x8, 0x81, 0x2, 0x1, 0x101, 0x4, 0x4, 0x3, 0x401, 0x5, 0x893, 0x3f000000, 0x4, 0x4], [0x8, 0x0, 0x748, 0x1ccb, 0x1ff, 0x4, 0x8, 0xec9, 0x6, 0x6, 0x7, 0x0, 0x3cc, 0x101, 0x7f, 0xffffffff, 0x16, 0x92, 0x9, 0x7c, 0x1, 0x786f, 0x4, 0x4, 0x7, 0xe4b, 0x0, 0xf30, 0x10, 0x5, 0x10000, 0x8c2b, 0x7, 0x8, 0x2, 0x2, 0x3, 0x0, 0x3, 0x5, 0x0, 0x8, 0xd8, 0x9, 0x7, 0x7cd, 0x6, 0x0, 0x8, 0x1, 0x9, 0x1, 0x6, 0x5, 0x80, 0x80, 0xfffffff7, 0x8001, 0x5, 0x38, 0x4f31, 0x7, 0x7fff, 0x2], [0x3, 0x5, 0x81, 0x4, 0x4, 0x0, 0xffff, 0x36, 0x91c, 0x3, 0x2, 0x1ff, 0x4, 0x4, 0x0, 0xd, 0xd, 0x81, 0x0, 0xd, 0x4, 0xf, 0x5, 0x20000000, 0x7, 0x3, 0xc, 0x7, 0x0, 0xfffffff8, 0x552, 0x7, 0x3ff, 0x7, 0x3, 0x2, 0x9, 0xd63, 0x773, 0x10001, 0x753, 0xf, 0x56ecfef1, 0x10000, 0x80, 0x0, 0xd, 0x1d6c, 0xc, 0x1, 0xffffffff, 0x0, 0x8, 0x8, 0xfff, 0x200, 0xcd4, 0x9, 0x8001, 0xfffffff7, 0x4, 0x5, 0x0, 0x5], 0xb, ['\'+,:}\x00', 'GPL\x00', '\x00']}, ["", "", "", "", "", "", "", ""]}, 0x42c}, 0x1, 0x0, 0x0, 0x48810}, 0x44040) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) cachestat(r1, &(0x7f0000000080)={0xfffffffffffffbc0, 0x8}, &(0x7f0000000180), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r5}, 0x10) r6 = syz_open_dev$sg(&(0x7f0000000000), 0xfff, 0x400201) ioctl$SG_GET_COMMAND_Q(r6, 0x2270, &(0x7f0000000040)) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000540)=ANY=[@ANYBLOB="0600000004000000008000005c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000fa"], 0x50) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000340)=0x4, 0x4) 720.514316ms ago: executing program 8 (id=5255): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYRES16=r0, @ANYRESDEC=r0, @ANYBLOB="010001642f49e1d8b20600000000000000000100000002000000", @ANYBLOB="255cd7d6a9b85ddb297856b1ef5fd3c3a4ac63c5dcb8be3f041b722110bee4f9ee2ec3af9c0f0bf75808b7a894ffcdb51881d5dcf08369760dbf373f3306b6abecee1e48faa0f735b61e9f800754e5f402a9acee67990af923ca7893bf47965e0031fb513668a3bd8fa81ea5bcfe5a6b1dd4076eca0719854c31714e9b3d78f06808fe27adb4598b5d92ddf7657e363bea5e289204b5a05aa147cf3b5cc2bade9e7e51eceb6eb2877ab66f4c159acafce881730465e54ee0df4208f4b90e", @ANYRESDEC=r0, @ANYBLOB="0000000000000000b689e52cbed3f793000000000200000000000000"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095", @ANYBLOB="02c1d1faa644762bccfd4abb40d9253045b3a711b8a4cc9e9cedd16dc6bdab1544fa128afe9c80317814ecf497eec04bf328fc1240a282b08076141fe9b9cc55fb0744f1353e0cc7d827f51eb67d9d344570e228a3c9209c4dbdda57d393148a049f5af253f33b47fbeb39233d1ceaddd676a7c2db59f41150523403c23d25b61806c7a635b1ad61bc3f4e1737aa98149f83343fd9a1dec045284bdcfe64d72350f8d8d0ac26dfcd16435a3327a73996c838890318f9a2b6caa8bda7576e83fc43cbb38b3f2980282d07c7a2743d04257e0f7f4d5cd25815c3ddb4aefe2ce993057f5488079b2e", @ANYBLOB="be3d960fcd6417c887c7ed76aff2026b272f7389d612684ea6b07265a45dc7fec93ccc54417682dcd5f737c7a2be21dba2b00db897d2f7bc75803030", @ANYRESDEC=r1, @ANYRESOCT=r1, @ANYRESHEX=r1, @ANYBLOB="8ed02c76219eef471352498643aced0c7c569acf89fa64ab6ebff591c9c23af9e55959a79a592db9f292fb1d434038690196c17c6fd71af7db32af48094c87c7eb098aff0c1d635c77ca5a96470aa6493dcd0e2bc8ede37008ca7ed0f63adb3cae0e565f0b1ba0bd588c4f5aa9ad92844da87542a2f7465aca7b099be9d29739e5e1f935729b47dce8a86c0ea9d198ebcfe2", @ANYRES16=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYRES64], 0x4b0}, 0x1, 0x0, 0x0, 0x40000}, 0x40004) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0)={[{@dioread_nolock}, {@minixdf}, {@nolazytime}, {}]}, 0x1, 0x783, &(0x7f0000002200)="$eJzs3M9rXOUaAOD3nGaa/si9kwt3ce+mCi20UDpJmk27Mm7ETaFQcFtDMgkhJ5mSmdQkFpq6E4TabFQE0b1Lt0Kpf4A7KSi4F0RrXKibkTOZTNt0Zjptk04bnwdO5vvOfN9533dm8uUcyJkA/rFezX8kEUMRcTEiis39aUQcbLQORaxvjdu8d20q35Ko1y/9kuTTYrNebB0raT4ejcaU+F9E3ClEnH7v0bjV1bX5ySwrLzX7I7WFKyPV1bUzcwuTs+XZ8uLY+PnRc+Pj50bHd63WE2+dP3zr2zc2Nr77qnbz2MCZJCYadUeztl0L9ICt16QQEzv2L+5FsD5Kehgz8BzyAACgu/w8/0Dz3KwQxTjQ7SzNCRwAAAC8lOqD9V792fNIAAAA4AWTRL8zAAAAAPbW9v8BbN/bu1f3wXby8+sRMdwu/kDjHuKIQ1GIiCObyUO3HyRb0+CZrN+IiNsTbT5/vdzR3N3o/ebh3Tkiu+12vv5MtFt/0tb6E23Wn4Ht7054Rp3Xv/vxD3RY/y72GOPrz/5f6Bj/RnXl/WPt4iet+EmH+G/3GP/mxge3Oj1X/yLiZNu/P8lDsbp8P8TIzFzW7lerle6dv07d7Vx/xJFH4idJI2rSvf4rPdb/7uZv8+td4p863v3934o/+NC8/DPxYTOPNCJuNR/z/saOGMcXvv/m0cjJ+nb86Q6vf/v3/81W/Z/3WP+PXw6u9DgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGtKIGIokLbXaaVoqRRyNiP/GkTSrVGunZyrLi9P5cxHDUUhn5rLyaEQUt/pJ3h9rtO/3z+7oj0fEf344vBV0LiuXpirZdL+LBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoOVoRAxFkpYiIo2I34tpWir1OysAAABg1w33OwEAAABgz7n+BwAAgP3vaa//k13OAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjXLl64kG/1zXvXpvL+9NXV5fnK1TPT5ep8aWF5qjRVWbpSmq1UZrNyaaqy8LjjpRExdj6WV0Zq5WptpLq6dnmhsrxYuzy3MDlbvlwuPJeqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFJDjS1JSxGRNtppWipF/CsihqOQzMxl5dGI+HdE3C0WBvP+WL+TBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNdVV9fmJ7OsvPRyN+r7q5yeG5FEvABpdGh80nxXuo1J1iP6nmraTPRZjhPxJLOuP+Zl6XfjlT6tRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9Fd1dW1+MsvKS9V+ZwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB/pT8lEZFvJ4snhnY+ezD5o9h4jIh3Pr300cpkrbY0lu//tbW/9nFz/9kHJl5/njUAAADAvvfakwzevk7fvo4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoVXV1bX4yy8pLe9iIG/2uEgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBp/BwAA//9Js7nR") r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x7a, &(0x7f0000000180)={@broadcast, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @loopback, [@hopopts={0x3a}, @routing]}}}}}}}, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000f00)=@raw={'raw\x00', 0x8, 0x3, 0x298, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x210, 0xffffffff, 0xffffffff, 0x210, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev, [], [], 'batadv0\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xd8, 0x100, 0x0, {0x0, 0x4c00}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x4}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8) bpf$MAP_CREATE(0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, 0xffffffffffffffff, &(0x7f0000000340)={0x4}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 498.817912ms ago: executing program 9 (id=5256): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000040)="8aade72c3fdea416ac8e70384d9c2e53", 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001280)={0x28, r2, 0xacf5e67dd0b583a1, 0x0, 0x25dfdbfb, {{0x5}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f6873720000000014"], 0xfc}}, 0x0) 378.508272ms ago: executing program 9 (id=5257): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000240)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0x4, 0x9, 0x52b, 0x5, 0x10, 0x4, 0x9, 0xc46}) 339.510295ms ago: executing program 9 (id=5258): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) 274.903149ms ago: executing program 0 (id=5259): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x5, 0x0, 0x0, 0x8009}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000020000000200000800040001000000", 0x24) 195.853495ms ago: executing program 0 (id=5260): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x800) 49.278786ms ago: executing program 0 (id=5261): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1fff}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="0200000004000000070000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) acct(&(0x7f0000000000)='./file0\x00') 48.880956ms ago: executing program 9 (id=5262): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="2064def0a667dc73fac42ea102a7c63800000000000000e424ff000000a963eda4e19bfb", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000080)={@ipv4={""/10, ""/2, @remote}, 0x0}, &(0x7f00000010c0)=0x14) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001100), 0x4) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001180), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x20, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x83}}}, &(0x7f0000001140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x29, '\x00', r1, @netfilter=0x2d, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0xb, &(0x7f0000000000)=ANY=[], 0x0) ioctl$BTRFS_IOC_ADD_DEV(r5, 0x40085503, &(0x7f00000000c0)={{}, "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"}) socket$tipc(0x1e, 0x5, 0x0) 0s ago: executing program 0 (id=5263): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000340)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x68}}, 0x0) kernel console output (not intermixed with test programs): 295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16461 comm="syz.4.4625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f3d9fd4cde9 code=0x7ffc0000 [ 289.076367][ T29] audit: type=1326 audit(1738995079.734:25219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16461 comm="syz.4.4625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d9fd4cde9 code=0x7ffc0000 [ 289.099940][ T29] audit: type=1326 audit(1738995079.734:25220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16461 comm="syz.4.4625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f3d9fd4cde9 code=0x7ffc0000 [ 289.123417][ T29] audit: type=1326 audit(1738995079.734:25221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16461 comm="syz.4.4625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d9fd4cde9 code=0x7ffc0000 [ 289.147227][ T29] audit: type=1326 audit(1738995079.734:25222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16461 comm="syz.4.4625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3d9fd4cde9 code=0x7ffc0000 [ 289.156202][T16402] Cannot create hsr debugfs directory [ 289.170993][ T29] audit: type=1326 audit(1738995079.734:25223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16461 comm="syz.4.4625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d9fd4cde9 code=0x7ffc0000 [ 289.200040][ T29] audit: type=1326 audit(1738995079.734:25224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16461 comm="syz.4.4625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3d9fd4cde9 code=0x7ffc0000 [ 289.242196][T13126] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.319615][T16402] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.374229][T16402] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.627471][T16402] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.752662][T16402] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.791163][T16481] loop4: detected capacity change from 0 to 512 [ 289.809876][T16479] loop8: detected capacity change from 0 to 8192 [ 289.814748][T16481] EXT4-fs: Ignoring removed bh option [ 289.824169][T16481] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 289.847468][T16481] EXT4-fs (loop4): 1 truncate cleaned up [ 289.876958][T16481] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.890183][T16402] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 289.902241][T16402] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 289.911914][T16402] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 289.931098][T16402] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 289.951552][T14611] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.041646][T16494] loop4: detected capacity change from 0 to 512 [ 290.042566][T16402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.049120][T16494] EXT4-fs: Ignoring removed oldalloc option [ 290.060638][T16495] loop7: detected capacity change from 0 to 512 [ 290.099676][T16494] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.4637: Parent and EA inode have the same ino 15 [ 290.127658][T16495] EXT4-fs: Ignoring removed bh option [ 290.129006][T16402] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.133459][T16494] EXT4-fs (loop4): Remounting filesystem read-only [ 290.141238][T16495] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 290.146395][T16494] EXT4-fs warning (device loop4): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 290.146539][T16494] EXT4-fs (loop4): 1 orphan inode deleted [ 290.172974][T16494] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 290.185322][T16494] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 290.194209][T15672] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.201434][T15672] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.207384][T16494] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.221185][T15676] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.228299][T15676] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.238323][T16495] EXT4-fs (loop7): 1 truncate cleaned up [ 290.244508][T16495] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.303210][T16503] loop0: detected capacity change from 0 to 2048 [ 290.348965][T13126] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.364550][T16503] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 290.440559][T16402] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.473697][T16515] SELinux: syz.4.4643 (16515) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 290.519181][T16515] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4643'. [ 290.561714][T11482] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.571440][T16515] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4643'. [ 290.831204][T16402] veth0_vlan: entered promiscuous mode [ 290.842372][T16402] veth1_vlan: entered promiscuous mode [ 291.591115][T16402] veth0_macvtap: entered promiscuous mode [ 291.600550][T16402] veth1_macvtap: entered promiscuous mode [ 291.642679][T16402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.653269][T16402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.663191][T16402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.673801][T16402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.683705][T16402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.694181][T16402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.704069][T16402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.714521][T16402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.724441][T16402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.734966][T16402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.795183][T16402] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 291.818806][T16402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.829439][T16402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.839312][T16402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.849754][T16402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.859611][T16402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.870141][T16402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.880177][T16402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.890761][T16402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.900809][T16402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.911299][T16402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.922100][T16402] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 291.980561][T16402] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.989383][T16402] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.998298][T16402] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.007204][T16402] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.056942][T16570] FAULT_INJECTION: forcing a failure. [ 292.056942][T16570] name failslab, interval 1, probability 0, space 0, times 0 [ 292.069817][T16570] CPU: 1 UID: 0 PID: 16570 Comm: syz.8.4657 Not tainted 6.14.0-rc1-syzkaller-00181-g7ee983c850b4 #0 [ 292.069846][T16570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 292.069859][T16570] Call Trace: [ 292.069866][T16570] [ 292.069885][T16570] dump_stack_lvl+0xf2/0x150 [ 292.069915][T16570] dump_stack+0x15/0x1a [ 292.069977][T16570] should_fail_ex+0x24a/0x260 [ 292.070009][T16570] should_failslab+0x8f/0xb0 [ 292.070036][T16570] kmem_cache_alloc_node_noprof+0x59/0x320 [ 292.070077][T16570] ? __alloc_skb+0x10b/0x310 [ 292.070184][T16570] __alloc_skb+0x10b/0x310 [ 292.070285][T16570] netlink_alloc_large_skb+0xad/0xe0 [ 292.070392][T16570] netlink_sendmsg+0x3b4/0x6e0 [ 292.070466][T16570] ? __pfx_netlink_sendmsg+0x10/0x10 [ 292.070507][T16570] __sock_sendmsg+0x140/0x180 [ 292.070531][T16570] ____sys_sendmsg+0x312/0x410 [ 292.070569][T16570] __sys_sendmmsg+0x227/0x4b0 [ 292.070756][T16570] __x64_sys_sendmmsg+0x57/0x70 [ 292.070796][T16570] x64_sys_call+0x29aa/0x2dc0 [ 292.070862][T16570] do_syscall_64+0xc9/0x1c0 [ 292.070892][T16570] ? clear_bhb_loop+0x55/0xb0 [ 292.070982][T16570] ? clear_bhb_loop+0x55/0xb0 [ 292.071016][T16570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.071063][T16570] RIP: 0033:0x7fa1f69dcde9 [ 292.071081][T16570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 292.071104][T16570] RSP: 002b:00007fa1f5047038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 292.071126][T16570] RAX: ffffffffffffffda RBX: 00007fa1f6bf5fa0 RCX: 00007fa1f69dcde9 [ 292.071141][T16570] RDX: 04000000000001f2 RSI: 0000400000000000 RDI: 0000000000000003 [ 292.071157][T16570] RBP: 00007fa1f5047090 R08: 0000000000000000 R09: 0000000000000000 [ 292.071240][T16570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 292.071255][T16570] R13: 0000000000000000 R14: 00007fa1f6bf5fa0 R15: 00007ffc302d1398 [ 292.071275][T16570] [ 292.078955][T16566] loop4: detected capacity change from 0 to 8192 [ 292.136170][T16577] loop8: detected capacity change from 0 to 512 [ 292.253509][T16573] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4658'. [ 292.265800][T16577] EXT4-fs: Ignoring removed bh option [ 292.267461][T16573] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4658'. [ 292.274762][T16577] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 292.276779][T16573] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4658'. [ 292.315502][T16577] EXT4-fs (loop8): 1 truncate cleaned up [ 292.316335][T16573] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4658'. [ 292.340005][T16573] netlink: 84 bytes leftover after parsing attributes in process `syz.0.4658'. [ 292.340820][T16577] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.343075][T16581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.378860][T16581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.409581][T14759] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.449845][T16584] loop8: detected capacity change from 0 to 512 [ 292.475434][T16584] EXT4-fs: Ignoring removed oldalloc option [ 292.510072][T16584] EXT4-fs error (device loop8): ext4_xattr_inode_iget:436: comm syz.8.4661: Parent and EA inode have the same ino 15 [ 292.535000][T16584] EXT4-fs (loop8): Remounting filesystem read-only [ 292.541716][T16584] EXT4-fs warning (device loop8): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 292.559819][T16584] EXT4-fs (loop8): 1 orphan inode deleted [ 292.566220][T16584] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.579397][T16584] SELinux: (dev loop8, type ext4) getxattr errno 5 [ 292.586618][T16584] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.749966][T16595] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4665'. [ 292.759292][T16595] netlink: 108 bytes leftover after parsing attributes in process `syz.7.4665'. [ 292.768721][T16595] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4665'. [ 293.168391][T16625] loop9: detected capacity change from 0 to 2048 [ 293.208478][T16625] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 293.239307][T16402] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.311899][T16633] loop4: detected capacity change from 0 to 8192 [ 293.653544][T16662] loop0: detected capacity change from 0 to 2048 [ 293.667168][T16662] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 293.701941][T11482] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.727915][T16666] sg_write: data in/out 512/2 bytes for SCSI command 0xb7-- guessing data in; [ 293.727915][T16666] program syz.0.4693 not setting count and/or reply_len properly [ 293.810481][T16674] loop0: detected capacity change from 0 to 512 [ 293.839090][T16674] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.856533][T16674] ext4 filesystem being mounted at /398/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 293.870117][T16674] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.895774][T16674] binfmt_misc: register: failed to install interpreter file ./file2 [ 293.923206][T16674] loop0: detected capacity change from 0 to 512 [ 293.983398][T16686] loop9: detected capacity change from 0 to 2048 [ 294.002401][T16686] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 294.052725][T16402] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.141943][ T29] kauditd_printk_skb: 278 callbacks suppressed [ 294.141961][ T29] audit: type=1326 audit(1738995084.914:25503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16705 comm="syz.4.4711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d9fd4cde9 code=0x7ffc0000 [ 294.204612][ T29] audit: type=1326 audit(1738995084.954:25504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16705 comm="syz.4.4711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3d9fd4cde9 code=0x7ffc0000 [ 294.228410][ T29] audit: type=1326 audit(1738995084.954:25505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16705 comm="syz.4.4711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d9fd4cde9 code=0x7ffc0000 [ 294.252113][ T29] audit: type=1326 audit(1738995084.954:25506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16705 comm="syz.4.4711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d9fd4cde9 code=0x7ffc0000 [ 294.275762][ T29] audit: type=1326 audit(1738995084.954:25507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16705 comm="syz.4.4711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f3d9fd4cde9 code=0x7ffc0000 [ 294.277963][T16707] loop9: detected capacity change from 0 to 8192 [ 294.299355][ T29] audit: type=1326 audit(1738995084.954:25508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16705 comm="syz.4.4711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d9fd4cde9 code=0x7ffc0000 [ 294.299392][ T29] audit: type=1326 audit(1738995084.954:25509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16705 comm="syz.4.4711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d9fd4cde9 code=0x7ffc0000 [ 294.353031][ T29] audit: type=1326 audit(1738995084.954:25510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16705 comm="syz.4.4711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f3d9fd4cde9 code=0x7ffc0000 [ 294.376775][ T29] audit: type=1326 audit(1738995084.964:25511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16705 comm="syz.4.4711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d9fd4cde9 code=0x7ffc0000 [ 294.400533][ T29] audit: type=1326 audit(1738995084.964:25512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16705 comm="syz.4.4711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3d9fd4cde9 code=0x7ffc0000 [ 294.537886][T16722] loop8: detected capacity change from 0 to 2048 [ 294.558020][T16722] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 294.597970][T14759] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.616137][T16725] loop0: detected capacity change from 0 to 8192 [ 294.901671][T16741] loop8: detected capacity change from 0 to 512 [ 294.908520][T16741] EXT4-fs: Ignoring removed bh option [ 294.914460][T16741] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 294.928019][T16741] EXT4-fs (loop8): 1 truncate cleaned up [ 294.934023][T16741] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.019505][T14759] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.069669][T16749] loop7: detected capacity change from 0 to 512 [ 295.096186][T16749] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 295.122531][T16749] EXT4-fs (loop7): orphan cleanup on readonly fs [ 295.130058][T16749] EXT4-fs warning (device loop7): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 295.147982][T16749] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 295.156321][T16749] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.4731: bg 0: block 40: padding at end of block bitmap is not set [ 295.187376][T16749] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 295.215257][T16749] EXT4-fs (loop7): 1 truncate cleaned up [ 295.222392][T16749] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 295.237185][T16749] EXT4-fs error (device loop7): ext4_xattr_block_get:596: inode #16: comm syz.7.4731: corrupted xattr block 31: invalid header [ 295.259449][T16749] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=16 [ 295.335388][T13126] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.388897][T16777] loop7: detected capacity change from 0 to 512 [ 295.409441][T16777] EXT4-fs: Ignoring removed bh option [ 295.421469][T16777] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 295.443196][T16777] EXT4-fs (loop7): 1 truncate cleaned up [ 295.449621][T16777] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.475791][T16773] loop8: detected capacity change from 0 to 8192 [ 295.515272][T16785] loop0: detected capacity change from 0 to 164 [ 295.522473][T13126] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.547753][T16785] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 295.591967][T16791] __nla_validate_parse: 12 callbacks suppressed [ 295.591985][T16791] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4746'. [ 295.784212][T16809] loop7: detected capacity change from 0 to 512 [ 295.792256][T16809] EXT4-fs: Ignoring removed bh option [ 295.933294][T16809] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 295.945388][T16809] EXT4-fs (loop7): 1 truncate cleaned up [ 295.951454][T16809] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.977730][T13126] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.072754][T16823] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4759'. [ 296.460702][T16844] loop4: detected capacity change from 0 to 512 [ 296.565123][T16844] EXT4-fs: Ignoring removed bh option [ 296.571070][T16844] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 296.607705][T16844] EXT4-fs (loop4): 1 truncate cleaned up [ 296.613796][T16844] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.821849][T14611] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.990635][T16855] loop8: detected capacity change from 0 to 8192 [ 297.156296][T16868] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4776'. [ 297.165337][T16868] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4776'. [ 297.185183][T16868] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4776'. [ 297.196639][T16868] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4776'. [ 297.205870][T16868] netlink: 84 bytes leftover after parsing attributes in process `syz.0.4776'. [ 297.379843][T16886] loop7: detected capacity change from 0 to 512 [ 297.386536][T16886] EXT4-fs: Ignoring removed bh option [ 297.392485][T16886] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 297.420863][T16891] sg_write: data in/out 512/2 bytes for SCSI command 0xb7-- guessing data in; [ 297.420863][T16891] program syz.4.4788 not setting count and/or reply_len properly [ 297.439728][T16886] EXT4-fs (loop7): 1 truncate cleaned up [ 297.446186][T16886] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.510337][T13126] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.520655][T16896] loop9: detected capacity change from 0 to 512 [ 297.546808][T16896] EXT4-fs: Ignoring removed oldalloc option [ 297.562843][T16896] EXT4-fs error (device loop9): ext4_xattr_inode_iget:436: comm syz.9.4790: Parent and EA inode have the same ino 15 [ 297.585670][T16903] loop8: detected capacity change from 0 to 512 [ 297.592083][T16896] EXT4-fs (loop9): Remounting filesystem read-only [ 297.598708][T16896] EXT4-fs warning (device loop9): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 297.610125][T16898] syzkaller0: entered promiscuous mode [ 297.615679][T16898] syzkaller0: entered allmulticast mode [ 297.615769][T16896] EXT4-fs (loop9): 1 orphan inode deleted [ 297.631087][T16903] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 297.644512][T16896] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 297.651735][T16903] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.4793: bg 0: block 321: padding at end of block bitmap is not set [ 297.656718][T16896] SELinux: (dev loop9, type ext4) getxattr errno 5 [ 297.678062][T16896] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.795820][T14759] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.046020][T16924] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4802'. [ 298.061027][T16924] SELinux: security_context_str_to_sid ({ÿ) failed with errno=-22 [ 298.254134][T16929] loop4: detected capacity change from 0 to 8192 [ 298.309978][T16930] loop0: detected capacity change from 0 to 8192 [ 298.409545][T16939] loop9: detected capacity change from 0 to 1024 [ 298.418438][T16939] EXT4-fs: Ignoring removed nobh option [ 298.424062][T16939] EXT4-fs: Ignoring removed bh option [ 298.447892][T16939] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.166808][T16969] loop7: detected capacity change from 0 to 1024 [ 299.174576][T16969] EXT4-fs: Ignoring removed nomblk_io_submit option [ 299.186473][T16969] EXT4-fs (loop7): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 299.210755][T16969] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 299.256061][ T29] kauditd_printk_skb: 456 callbacks suppressed [ 299.256086][ T29] audit: type=1326 audit(1738995090.034:25968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16965 comm="syz.8.4819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fa1f69dcde9 code=0x7ffc0000 [ 299.505878][T16402] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.583568][ T29] audit: type=1326 audit(1738995090.344:25969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16965 comm="syz.8.4819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f69dcde9 code=0x7ffc0000 [ 299.607281][ T29] audit: type=1326 audit(1738995090.354:25970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16965 comm="syz.8.4819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f69dcde9 code=0x7ffc0000 [ 300.468476][T16988] loop9: detected capacity change from 0 to 2048 [ 300.501611][ T29] audit: type=1400 audit(1738995091.274:25971): avc: denied { create } for pid=16991 comm="syz.0.4828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 300.522313][ T29] audit: type=1400 audit(1738995091.274:25972): avc: denied { connect } for pid=16991 comm="syz.0.4828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 300.549399][T16988] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 300.580506][T16996] lo speed is unknown, defaulting to 1000 [ 300.588619][T16988] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 300.622893][T16992] loop0: detected capacity change from 0 to 128 [ 300.667911][T16992] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 300.760773][ T29] audit: type=1326 audit(1738995091.534:25973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17002 comm="syz.4.4831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d9fd4cde9 code=0x7ffc0000 [ 300.784519][ T29] audit: type=1326 audit(1738995091.534:25974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17002 comm="syz.4.4831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d9fd4cde9 code=0x7ffc0000 [ 300.808117][ T29] audit: type=1326 audit(1738995091.534:25975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17002 comm="syz.4.4831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7f3d9fd4cde9 code=0x7ffc0000 [ 300.831733][ T29] audit: type=1326 audit(1738995091.534:25976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17002 comm="syz.4.4831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d9fd4cde9 code=0x7ffc0000 [ 300.855372][ T29] audit: type=1326 audit(1738995091.534:25977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17002 comm="syz.4.4831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d9fd4cde9 code=0x7ffc0000 [ 300.939234][T17004] lo speed is unknown, defaulting to 1000 [ 300.946789][T16992] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 300.990647][T17008] loop4: detected capacity change from 0 to 1024 [ 301.039400][T17008] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 301.050410][T17008] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 301.100235][T17008] JBD2: no valid journal superblock found [ 301.106131][T17008] EXT4-fs (loop4): Could not load journal inode [ 301.174610][T13126] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.196236][ T58] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 301.361236][T17017] loop4: detected capacity change from 0 to 8192 [ 302.018497][T17039] loop8: detected capacity change from 0 to 512 [ 302.139014][T17045] FAULT_INJECTION: forcing a failure. [ 302.139014][T17045] name failslab, interval 1, probability 0, space 0, times 0 [ 302.151772][T17045] CPU: 0 UID: 0 PID: 17045 Comm: syz.8.4845 Not tainted 6.14.0-rc1-syzkaller-00181-g7ee983c850b4 #0 [ 302.151841][T17045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 302.151856][T17045] Call Trace: [ 302.151865][T17045] [ 302.151873][T17045] dump_stack_lvl+0xf2/0x150 [ 302.151900][T17045] dump_stack+0x15/0x1a [ 302.151998][T17045] should_fail_ex+0x24a/0x260 [ 302.152036][T17045] should_failslab+0x8f/0xb0 [ 302.152068][T17045] kmem_cache_alloc_node_noprof+0x59/0x320 [ 302.152111][T17045] ? __alloc_skb+0x10b/0x310 [ 302.152142][T17045] __alloc_skb+0x10b/0x310 [ 302.152189][T17045] ? audit_log_start+0x34c/0x6b0 [ 302.152228][T17045] audit_log_start+0x368/0x6b0 [ 302.152289][T17045] audit_seccomp+0x4b/0x130 [ 302.152374][T17045] __seccomp_filter+0x6fa/0x1180 [ 302.152400][T17045] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 302.152460][T17045] ? vfs_write+0x644/0x920 [ 302.152538][T17045] __secure_computing+0x9f/0x1c0 [ 302.152565][T17045] syscall_trace_enter+0xd1/0x1f0 [ 302.152592][T17045] ? fpregs_assert_state_consistent+0x83/0xa0 [ 302.152701][T17045] do_syscall_64+0xaa/0x1c0 [ 302.152728][T17045] ? clear_bhb_loop+0x55/0xb0 [ 302.152755][T17045] ? clear_bhb_loop+0x55/0xb0 [ 302.152784][T17045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.152816][T17045] RIP: 0033:0x7fa1f69dcde9 [ 302.152846][T17045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 302.152869][T17045] RSP: 002b:00007fa1f5047038 EFLAGS: 00000246 ORIG_RAX: 0000000000000083 [ 302.152893][T17045] RAX: ffffffffffffffda RBX: 00007fa1f6bf5fa0 RCX: 00007fa1f69dcde9 [ 302.152905][T17045] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 302.152916][T17045] RBP: 00007fa1f5047090 R08: 0000000000000000 R09: 0000000000000000 [ 302.152987][T17045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 302.153001][T17045] R13: 0000000000000000 R14: 00007fa1f6bf5fa0 R15: 00007ffc302d1398 [ 302.153019][T17045] [ 302.453279][T16988] syz.9.4820 (16988) used greatest stack depth: 7208 bytes left [ 302.462289][T16402] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.533065][T17062] sg_write: data in/out 512/2 bytes for SCSI command 0xb7-- guessing data in; [ 302.533065][T17062] program syz.0.4852 not setting count and/or reply_len properly [ 302.560460][T17065] loop8: detected capacity change from 0 to 2048 [ 302.599277][T17074] FAULT_INJECTION: forcing a failure. [ 302.599277][T17074] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 302.609207][T17065] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 302.612417][T17074] CPU: 1 UID: 0 PID: 17074 Comm: syz.4.4858 Not tainted 6.14.0-rc1-syzkaller-00181-g7ee983c850b4 #0 [ 302.612451][T17074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 302.612521][T17074] Call Trace: [ 302.612529][T17074] [ 302.612538][T17074] dump_stack_lvl+0xf2/0x150 [ 302.612572][T17074] dump_stack+0x15/0x1a [ 302.612597][T17074] should_fail_ex+0x24a/0x260 [ 302.612639][T17074] should_fail+0xb/0x10 [ 302.612711][T17074] should_fail_usercopy+0x1a/0x20 [ 302.612735][T17074] _copy_to_user+0x20/0xa0 [ 302.612764][T17074] simple_read_from_buffer+0xa0/0x110 [ 302.612794][T17074] proc_fail_nth_read+0xf9/0x140 [ 302.612844][T17074] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 302.612873][T17074] vfs_read+0x19b/0x6f0 [ 302.612897][T17074] ? __rcu_read_unlock+0x4e/0x70 [ 302.612923][T17074] ? __fget_files+0x17c/0x1c0 [ 302.613024][T17074] ksys_read+0xe8/0x1b0 [ 302.613098][T17074] __x64_sys_read+0x42/0x50 [ 302.613124][T17074] x64_sys_call+0x2874/0x2dc0 [ 302.613216][T17074] do_syscall_64+0xc9/0x1c0 [ 302.613321][T17074] ? clear_bhb_loop+0x55/0xb0 [ 302.613355][T17074] ? clear_bhb_loop+0x55/0xb0 [ 302.613388][T17074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.613452][T17074] RIP: 0033:0x7f3d9fd4b7fc [ 302.613470][T17074] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 302.613533][T17074] RSP: 002b:00007f3d9e3b1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 302.613556][T17074] RAX: ffffffffffffffda RBX: 00007f3d9ff65fa0 RCX: 00007f3d9fd4b7fc [ 302.613593][T17074] RDX: 000000000000000f RSI: 00007f3d9e3b10a0 RDI: 0000000000000007 [ 302.613609][T17074] RBP: 00007f3d9e3b1090 R08: 0000000000000000 R09: 0000000000000000 [ 302.613624][T17074] R10: 0000400000000d40 R11: 0000000000000246 R12: 0000000000000001 [ 302.613639][T17074] R13: 0000000000000000 R14: 00007f3d9ff65fa0 R15: 00007ffebd903aa8 [ 302.613662][T17074] [ 302.837302][T14759] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.862783][T17086] loop8: detected capacity change from 0 to 2048 [ 302.876540][T17086] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 302.996838][T14759] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.523068][T17133] FAULT_INJECTION: forcing a failure. [ 303.523068][T17133] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 303.536249][T17133] CPU: 0 UID: 0 PID: 17133 Comm: syz.0.4880 Not tainted 6.14.0-rc1-syzkaller-00181-g7ee983c850b4 #0 [ 303.536358][T17133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 303.536374][T17133] Call Trace: [ 303.536381][T17133] [ 303.536388][T17133] dump_stack_lvl+0xf2/0x150 [ 303.536421][T17133] dump_stack+0x15/0x1a [ 303.536445][T17133] should_fail_ex+0x24a/0x260 [ 303.536562][T17133] should_fail+0xb/0x10 [ 303.536671][T17133] should_fail_usercopy+0x1a/0x20 [ 303.536689][T17133] strncpy_from_user+0x25/0x210 [ 303.536715][T17133] ? kmem_cache_alloc_noprof+0x18e/0x320 [ 303.536779][T17133] ? getname_flags+0x81/0x3b0 [ 303.536817][T17133] getname_flags+0xb0/0x3b0 [ 303.536855][T17133] getname+0x17/0x20 [ 303.536941][T17133] do_sys_openat2+0x67/0x120 [ 303.536976][T17133] __x64_sys_openat+0xf3/0x120 [ 303.537008][T17133] x64_sys_call+0x2b30/0x2dc0 [ 303.537034][T17133] do_syscall_64+0xc9/0x1c0 [ 303.537103][T17133] ? clear_bhb_loop+0x55/0xb0 [ 303.537131][T17133] ? clear_bhb_loop+0x55/0xb0 [ 303.537157][T17133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.537188][T17133] RIP: 0033:0x7fcb7330b750 [ 303.537206][T17133] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 303.537229][T17133] RSP: 002b:00007fcb71970f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 303.537250][T17133] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fcb7330b750 [ 303.537262][T17133] RDX: 0000000000000002 RSI: 00007fcb71970fa0 RDI: 00000000ffffff9c [ 303.537274][T17133] RBP: 00007fcb71970fa0 R08: 0000000000000000 R09: 0000000000000000 [ 303.537287][T17133] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 303.537336][T17133] R13: 0000000000000000 R14: 00007fcb73525fa0 R15: 00007ffce97e7258 [ 303.537360][T17133] [ 303.850591][T17138] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4882'. [ 303.879403][T17137] loop9: detected capacity change from 0 to 2048 [ 303.904734][T17138] gretap0: entered promiscuous mode [ 303.922654][T17138] gretap0: left promiscuous mode [ 304.030412][T17137] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 304.258166][T17154] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4884'. [ 304.267267][T17154] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4884'. [ 304.308601][T16402] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.327941][T17154] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4884'. [ 304.338775][ T29] kauditd_printk_skb: 208 callbacks suppressed [ 304.338822][ T29] audit: type=1326 audit(1738995095.104:26184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17152 comm="syz.8.4885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fa1f69dcde9 code=0x7ffc0000 [ 304.382540][T17159] loop8: detected capacity change from 0 to 512 [ 304.391961][T17154] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4884'. [ 304.401137][T17154] netlink: 84 bytes leftover after parsing attributes in process `syz.0.4884'. [ 304.424467][ T29] audit: type=1400 audit(1738995095.144:26185): avc: denied { ioctl } for pid=17155 comm="syz.4.4887" path="socket:[51555]" dev="sockfs" ino=51555 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 304.469937][T17159] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 304.483775][T17159] ext4 filesystem being mounted at /170/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 304.505966][T17159] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4889'. [ 304.524995][ T29] audit: type=1400 audit(1738995095.304:26186): avc: denied { ioctl } for pid=17158 comm="syz.8.4889" path="socket:[51580]" dev="sockfs" ino=51580 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 304.550529][T17159] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4889'. [ 304.562169][T17159] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 304.569641][T17159] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 304.579253][T17159] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 304.586773][T17159] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 304.616763][ T29] audit: type=1326 audit(1738995095.384:26187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17164 comm="syz.4.4891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d9fd4cde9 code=0x7ffc0000 [ 304.640521][ T29] audit: type=1326 audit(1738995095.384:26188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17164 comm="syz.4.4891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3d9fd4cde9 code=0x7ffc0000 [ 304.664168][ T29] audit: type=1326 audit(1738995095.384:26189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17164 comm="syz.4.4891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d9fd4cde9 code=0x7ffc0000 [ 304.687923][ T29] audit: type=1326 audit(1738995095.384:26190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17164 comm="syz.4.4891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3d9fd4cde9 code=0x7ffc0000 [ 304.711524][ T29] audit: type=1326 audit(1738995095.394:26191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17164 comm="syz.4.4891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d9fd4cde9 code=0x7ffc0000 [ 304.735406][ T29] audit: type=1326 audit(1738995095.394:26192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17164 comm="syz.4.4891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3d9fd4cde9 code=0x7ffc0000 [ 304.759059][ T29] audit: type=1326 audit(1738995095.394:26193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17164 comm="syz.4.4891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d9fd4cde9 code=0x7ffc0000 [ 304.840967][T17175] loop9: detected capacity change from 0 to 512 [ 304.849434][T17175] EXT4-fs: Ignoring removed oldalloc option [ 304.871833][T17175] EXT4-fs error (device loop9): ext4_xattr_inode_iget:436: comm syz.9.4894: Parent and EA inode have the same ino 15 [ 304.889704][T17175] EXT4-fs (loop9): Remounting filesystem read-only [ 304.896388][T17175] EXT4-fs warning (device loop9): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 304.908404][T17175] EXT4-fs (loop9): 1 orphan inode deleted [ 304.914551][T17175] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 304.934869][T17175] SELinux: (dev loop9, type ext4) getxattr errno 5 [ 304.942939][T17175] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.974726][T17187] loop0: detected capacity change from 0 to 512 [ 305.014081][T17187] EXT4-fs (loop0): too many log groups per flexible block group [ 305.021920][T17187] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 305.035289][T17187] EXT4-fs (loop0): mount failed [ 305.111876][T17211] sg_write: data in/out 512/2 bytes for SCSI command 0xb7-- guessing data in; [ 305.111876][T17211] program syz.4.4908 not setting count and/or reply_len properly [ 305.223714][T17227] loop9: detected capacity change from 0 to 128 [ 305.239646][T17222] loop4: detected capacity change from 0 to 8192 [ 305.304621][T17227] syz.9.4915: attempt to access beyond end of device [ 305.304621][T17227] loop9: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 305.397895][T17227] syz.9.4915: attempt to access beyond end of device [ 305.397895][T17227] loop9: rw=524288, sector=145, nr_sectors = 896 limit=128 [ 305.417483][T17246] loop8: detected capacity change from 0 to 128 [ 305.419879][T17248] loop7: detected capacity change from 0 to 512 [ 305.430734][T17248] EXT4-fs: Ignoring removed i_version option [ 305.436203][T17246] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 305.438205][T17248] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 305.444519][T17246] FAT-fs (loop8): Filesystem has been set read-only [ 305.450964][T17246] syz.8.4923: attempt to access beyond end of device [ 305.450964][T17246] loop8: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 305.456305][T17248] EXT4-fs (loop7): 1 truncate cleaned up [ 305.481813][T17246] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 305.489717][T17246] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 305.498650][T17246] syz.8.4923: attempt to access beyond end of device [ 305.498650][T17246] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 305.513783][T17246] syz.8.4923: attempt to access beyond end of device [ 305.513783][T17246] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 305.882858][T17290] FAULT_INJECTION: forcing a failure. [ 305.882858][T17290] name failslab, interval 1, probability 0, space 0, times 0 [ 305.895590][T17290] CPU: 1 UID: 0 PID: 17290 Comm: syz.9.4941 Not tainted 6.14.0-rc1-syzkaller-00181-g7ee983c850b4 #0 [ 305.895644][T17290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 305.895657][T17290] Call Trace: [ 305.895665][T17290] [ 305.895674][T17290] dump_stack_lvl+0xf2/0x150 [ 305.895706][T17290] dump_stack+0x15/0x1a [ 305.895789][T17290] should_fail_ex+0x24a/0x260 [ 305.895869][T17290] should_failslab+0x8f/0xb0 [ 305.895901][T17290] kmem_cache_alloc_noprof+0x52/0x320 [ 305.895942][T17290] ? alloc_empty_file+0xd0/0x200 [ 305.895978][T17290] alloc_empty_file+0xd0/0x200 [ 305.896015][T17290] path_openat+0x6a/0x1fc0 [ 305.896106][T17290] ? next_uptodate_folio+0x809/0x890 [ 305.896146][T17290] ? _raw_spin_lock_irqsave+0x3c/0xb0 [ 305.896178][T17290] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 305.896209][T17290] ? percpu_counter_add_batch+0x136/0x140 [ 305.896261][T17290] ? __rcu_read_unlock+0x34/0x70 [ 305.896286][T17290] ? filemap_map_pages+0x8c6/0xb30 [ 305.896331][T17290] ? cgroup_rstat_updated+0x9f/0x570 [ 305.896383][T17290] do_filp_open+0x107/0x230 [ 305.896411][T17290] do_sys_openat2+0xab/0x120 [ 305.896446][T17290] __x64_sys_openat+0xf3/0x120 [ 305.896487][T17290] x64_sys_call+0x2b30/0x2dc0 [ 305.896563][T17290] do_syscall_64+0xc9/0x1c0 [ 305.896590][T17290] ? clear_bhb_loop+0x55/0xb0 [ 305.896627][T17290] ? clear_bhb_loop+0x55/0xb0 [ 305.896654][T17290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.896680][T17290] RIP: 0033:0x7fc180c4b750 [ 305.896695][T17290] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 305.896716][T17290] RSP: 002b:00007fc17f2b6b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 305.896820][T17290] RAX: ffffffffffffffda RBX: 0000000000041341 RCX: 00007fc180c4b750 [ 305.896836][T17290] RDX: 0000000000041341 RSI: 00007fc17f2b6c10 RDI: 00000000ffffff9c [ 305.896851][T17290] RBP: 00007fc17f2b6c10 R08: 0000000000000000 R09: 0000000000000000 [ 305.896865][T17290] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 305.896876][T17290] R13: 0000000000000001 R14: 00007fc180e65fa0 R15: 00007ffded0cb3e8 [ 305.896897][T17290] [ 306.342379][T17317] loop4: detected capacity change from 0 to 1024 [ 306.352845][T17317] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 306.361346][T17323] netlink: 36 bytes leftover after parsing attributes in process `syz.9.4950'. [ 306.363878][T17317] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 306.372736][T17323] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4950'. [ 306.389439][T17317] JBD2: no valid journal superblock found [ 306.397102][T17317] EXT4-fs (loop4): Could not load journal inode [ 306.872037][T17329] loop0: detected capacity change from 0 to 8192 [ 307.236944][T17347] loop4: detected capacity change from 0 to 164 [ 307.263572][T17347] Unable to read rock-ridge attributes [ 307.275621][T17347] FAULT_INJECTION: forcing a failure. [ 307.275621][T17347] name failslab, interval 1, probability 0, space 0, times 0 [ 307.288389][T17347] CPU: 1 UID: 0 PID: 17347 Comm: syz.4.4962 Not tainted 6.14.0-rc1-syzkaller-00181-g7ee983c850b4 #0 [ 307.288416][T17347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 307.288428][T17347] Call Trace: [ 307.288435][T17347] [ 307.288470][T17347] dump_stack_lvl+0xf2/0x150 [ 307.288515][T17347] dump_stack+0x15/0x1a [ 307.288537][T17347] should_fail_ex+0x24a/0x260 [ 307.288570][T17347] should_failslab+0x8f/0xb0 [ 307.288602][T17347] kmem_cache_alloc_lru_noprof+0x57/0x320 [ 307.288663][T17347] ? __d_alloc+0x3d/0x340 [ 307.288762][T17347] __d_alloc+0x3d/0x340 [ 307.288834][T17347] d_alloc_parallel+0x54/0xc80 [ 307.288958][T17347] ? selinux_inode_permission+0x341/0x410 [ 307.289054][T17347] ? lockref_get_not_dead+0x117/0x1b0 [ 307.289082][T17347] ? __rcu_read_unlock+0x4e/0x70 [ 307.289114][T17347] ? down_read+0x171/0x4b0 [ 307.289198][T17347] __lookup_slow+0x8d/0x250 [ 307.289240][T17347] lookup_slow+0x3c/0x60 [ 307.289295][T17347] walk_component+0x1f5/0x230 [ 307.289324][T17347] ? path_lookupat+0xfd/0x2b0 [ 307.289364][T17347] path_lookupat+0x10a/0x2b0 [ 307.289404][T17347] filename_lookup+0x150/0x340 [ 307.289475][T17347] user_path_at+0x3c/0x120 [ 307.289514][T17347] do_faccessat+0x35b/0x680 [ 307.289557][T17347] __x64_sys_faccessat+0x43/0x50 [ 307.289586][T17347] x64_sys_call+0x1e6d/0x2dc0 [ 307.289614][T17347] do_syscall_64+0xc9/0x1c0 [ 307.289776][T17347] ? clear_bhb_loop+0x55/0xb0 [ 307.289830][T17347] ? clear_bhb_loop+0x55/0xb0 [ 307.289864][T17347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.289906][T17347] RIP: 0033:0x7f3d9fd4cde9 [ 307.289921][T17347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 307.289942][T17347] RSP: 002b:00007f3d9e3b1038 EFLAGS: 00000246 ORIG_RAX: 000000000000010d [ 307.290043][T17347] RAX: ffffffffffffffda RBX: 00007f3d9ff65fa0 RCX: 00007f3d9fd4cde9 [ 307.290057][T17347] RDX: 0000000000000005 RSI: 0000400000000000 RDI: 0000000000000004 [ 307.290071][T17347] RBP: 00007f3d9e3b1090 R08: 0000000000000000 R09: 0000000000000000 [ 307.290092][T17347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 307.290107][T17347] R13: 0000000000000000 R14: 00007f3d9ff65fa0 R15: 00007ffebd903aa8 [ 307.290149][T17347] [ 307.546521][T17353] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 307.596317][T17357] loop8: detected capacity change from 0 to 2048 [ 307.645647][T17357] loop8: p3 p4 < > [ 307.699960][T17357] syzkaller0: entered allmulticast mode [ 307.708531][T17356] syzkaller0: left allmulticast mode [ 307.714777][T17377] loop7: detected capacity change from 0 to 2048 [ 307.749891][T17380] lo speed is unknown, defaulting to 1000 [ 307.795105][T17369] loop0: detected capacity change from 0 to 128 [ 307.801865][T17369] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 307.814671][T17369] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 307.847583][T17386] loop7: detected capacity change from 0 to 512 [ 307.864704][T17386] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 307.900348][T17386] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c018, mo2=0002] [ 307.912841][T17386] EXT4-fs (loop7): 1 truncate cleaned up [ 307.960519][T15675] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 308.054770][T17404] FAULT_INJECTION: forcing a failure. [ 308.054770][T17404] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 308.068126][T17404] CPU: 0 UID: 0 PID: 17404 Comm: syz.9.4985 Not tainted 6.14.0-rc1-syzkaller-00181-g7ee983c850b4 #0 [ 308.068158][T17404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 308.068234][T17404] Call Trace: [ 308.068241][T17404] [ 308.068251][T17404] dump_stack_lvl+0xf2/0x150 [ 308.068280][T17404] dump_stack+0x15/0x1a [ 308.068301][T17404] should_fail_ex+0x24a/0x260 [ 308.068334][T17404] should_fail+0xb/0x10 [ 308.068420][T17404] should_fail_usercopy+0x1a/0x20 [ 308.068444][T17404] _copy_to_user+0x20/0xa0 [ 308.068467][T17404] simple_read_from_buffer+0xa0/0x110 [ 308.068567][T17404] proc_fail_nth_read+0xf9/0x140 [ 308.068598][T17404] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 308.068635][T17404] vfs_read+0x19b/0x6f0 [ 308.068658][T17404] ? __rcu_read_unlock+0x4e/0x70 [ 308.068689][T17404] ? __fget_files+0x17c/0x1c0 [ 308.068720][T17404] ksys_read+0xe8/0x1b0 [ 308.068742][T17404] __x64_sys_read+0x42/0x50 [ 308.068767][T17404] x64_sys_call+0x2874/0x2dc0 [ 308.068850][T17404] do_syscall_64+0xc9/0x1c0 [ 308.068954][T17404] ? clear_bhb_loop+0x55/0xb0 [ 308.068987][T17404] ? clear_bhb_loop+0x55/0xb0 [ 308.069014][T17404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.069040][T17404] RIP: 0033:0x7fc180c4b7fc [ 308.069063][T17404] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 308.069146][T17404] RSP: 002b:00007fc17f2b7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 308.069164][T17404] RAX: ffffffffffffffda RBX: 00007fc180e65fa0 RCX: 00007fc180c4b7fc [ 308.069179][T17404] RDX: 000000000000000f RSI: 00007fc17f2b70a0 RDI: 0000000000000006 [ 308.069193][T17404] RBP: 00007fc17f2b7090 R08: 0000000000000000 R09: 0000000000000000 [ 308.069204][T17404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.069216][T17404] R13: 0000000000000000 R14: 00007fc180e65fa0 R15: 00007ffded0cb3e8 [ 308.069290][T17404] [ 308.324873][T15676] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.426345][T17422] lo speed is unknown, defaulting to 1000 [ 308.525294][T17424] loop7: detected capacity change from 0 to 128 [ 308.545205][T17424] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 308.591477][T17417] loop9: detected capacity change from 0 to 8192 [ 308.605250][T17424] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 308.698148][T15676] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.743243][T17419] lo speed is unknown, defaulting to 1000 [ 308.792606][T15676] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.819761][T17420] lo speed is unknown, defaulting to 1000 [ 308.851088][T15676] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.906480][T15672] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 309.007402][T17420] chnl_net:caif_netlink_parms(): no params data found [ 309.017197][T17451] hub 9-0:1.0: USB hub found [ 309.021955][T17451] hub 9-0:1.0: 8 ports detected [ 309.066700][T17453] 9pnet: Could not find request transport: xen [ 309.084872][T17453] loop0: detected capacity change from 0 to 512 [ 309.092713][T17453] EXT4-fs: Ignoring removed nobh option [ 309.111441][T17453] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 309.124326][T17453] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.4999: attempt to clear invalid blocks 2 len 1 [ 309.141542][T17453] EXT4-fs (loop0): Remounting filesystem read-only [ 309.150758][T17453] EXT4-fs (loop0): 1 truncate cleaned up [ 309.156899][T17453] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 309.240063][T17466] FAULT_INJECTION: forcing a failure. [ 309.240063][T17466] name failslab, interval 1, probability 0, space 0, times 0 [ 309.252736][T17466] CPU: 0 UID: 0 PID: 17466 Comm: syz.9.5003 Not tainted 6.14.0-rc1-syzkaller-00181-g7ee983c850b4 #0 [ 309.252765][T17466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 309.252779][T17466] Call Trace: [ 309.252788][T17466] [ 309.252797][T17466] dump_stack_lvl+0xf2/0x150 [ 309.252893][T17466] dump_stack+0x15/0x1a [ 309.252993][T17466] should_fail_ex+0x24a/0x260 [ 309.253035][T17466] should_failslab+0x8f/0xb0 [ 309.253061][T17466] kmem_cache_alloc_noprof+0x52/0x320 [ 309.253089][T17466] ? __kernfs_new_node+0x6a/0x380 [ 309.253158][T17466] __kernfs_new_node+0x6a/0x380 [ 309.253177][T17466] ? mod_objcg_state+0x2ea/0x4f0 [ 309.253204][T17466] ? mod_objcg_state+0x2ea/0x4f0 [ 309.253231][T17466] ? __memcg_slab_post_alloc_hook+0x582/0x660 [ 309.253297][T17466] ? down_read+0x171/0x4b0 [ 309.253317][T17466] kernfs_new_node+0xc8/0x140 [ 309.253337][T17466] kernfs_create_link+0x6c/0x120 [ 309.253362][T17466] sysfs_do_create_link_sd+0x6b/0xf0 [ 309.253403][T17466] sysfs_create_link+0x51/0x70 [ 309.253432][T17466] driver_sysfs_add+0x54/0x160 [ 309.253451][T17466] really_probe+0x101/0x5d0 [ 309.253505][T17466] __driver_probe_device+0x12d/0x200 [ 309.253525][T17466] driver_probe_device+0x38/0x2f0 [ 309.253546][T17466] __device_attach_driver+0x216/0x320 [ 309.253567][T17466] ? __pfx___device_attach_driver+0x10/0x10 [ 309.253588][T17466] bus_for_each_drv+0x1cd/0x240 [ 309.253690][T17466] __device_attach+0x1c7/0x290 [ 309.253710][T17466] device_attach+0x17/0x20 [ 309.253727][T17466] proc_ioctl+0x339/0x400 [ 309.253765][T17466] usbdev_ioctl+0x1f01/0x3e00 [ 309.253812][T17466] ? do_vfs_ioctl+0x96e/0x1530 [ 309.253835][T17466] ? selinux_file_ioctl+0x2f7/0x380 [ 309.253889][T17466] ? __fget_files+0x17c/0x1c0 [ 309.253913][T17466] ? __pfx_usbdev_ioctl+0x10/0x10 [ 309.253947][T17466] __se_sys_ioctl+0xc9/0x140 [ 309.253964][T17466] __x64_sys_ioctl+0x43/0x50 [ 309.253981][T17466] x64_sys_call+0x1690/0x2dc0 [ 309.254044][T17466] do_syscall_64+0xc9/0x1c0 [ 309.254066][T17466] ? clear_bhb_loop+0x55/0xb0 [ 309.254101][T17466] ? clear_bhb_loop+0x55/0xb0 [ 309.254133][T17466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.254161][T17466] RIP: 0033:0x7fc180c4cde9 [ 309.254175][T17466] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 309.254190][T17466] RSP: 002b:00007fc17f2b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 309.254206][T17466] RAX: ffffffffffffffda RBX: 00007fc180e65fa0 RCX: 00007fc180c4cde9 [ 309.254217][T17466] RDX: 0000400000000000 RSI: 00000000c0105512 RDI: 0000000000000004 [ 309.254228][T17466] RBP: 00007fc17f2b7090 R08: 0000000000000000 R09: 0000000000000000 [ 309.254238][T17466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 309.254248][T17466] R13: 0000000000000000 R14: 00007fc180e65fa0 R15: 00007ffded0cb3e8 [ 309.254324][T17466] [ 309.254334][T17466] hub 9-0:1.0: really_probe: driver_sysfs_add failed [ 309.352708][ T29] kauditd_printk_skb: 478 callbacks suppressed [ 309.352725][ T29] audit: type=1326 audit(1738995100.114:26672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17464 comm="syz.0.5002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fcb7330cde9 code=0x7ffc0000 [ 309.575244][ T29] audit: type=1326 audit(1738995100.124:26673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17462 comm="syz.0.5002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcb732a8fb9 code=0x7ffc0000 [ 309.598806][ T29] audit: type=1326 audit(1738995100.124:26674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17462 comm="syz.0.5002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb7330cde9 code=0x7ffc0000 [ 309.622560][ T29] audit: type=1326 audit(1738995100.124:26675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17462 comm="syz.0.5002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb7330cde9 code=0x7ffc0000 [ 309.646553][ T29] audit: type=1326 audit(1738995100.194:26676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17469 comm="syz.0.5004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb7330cde9 code=0x7ffc0000 [ 309.646587][T15676] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 309.670126][ T29] audit: type=1326 audit(1738995100.194:26677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17469 comm="syz.0.5004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb7330cde9 code=0x7ffc0000 [ 309.702575][ T29] audit: type=1326 audit(1738995100.194:26678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17469 comm="syz.0.5004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fcb7330cde9 code=0x7ffc0000 [ 309.726285][ T29] audit: type=1326 audit(1738995100.194:26679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17469 comm="syz.0.5004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb7330cde9 code=0x7ffc0000 [ 309.749907][ T29] audit: type=1326 audit(1738995100.194:26680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17469 comm="syz.0.5004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb7330cde9 code=0x7ffc0000 [ 309.773563][ T29] audit: type=1326 audit(1738995100.194:26681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17469 comm="syz.0.5004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcb7330cde9 code=0x7ffc0000 [ 309.798903][T15676] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 309.808939][T15676] bond0 (unregistering): Released all slaves [ 309.866158][T15676] hsr_slave_0: left promiscuous mode [ 309.872237][T15676] hsr_slave_1: left promiscuous mode [ 309.888507][T15676] veth1_macvtap: left promiscuous mode [ 309.900733][T15676] veth0_macvtap: left promiscuous mode [ 309.906591][T15676] veth1_vlan: left promiscuous mode [ 309.912025][T15676] veth0_vlan: left promiscuous mode [ 309.950068][T17481] loop7: detected capacity change from 0 to 8192 [ 309.959927][T17481] FAT-fs (loop7): error, invalid access to FAT (entry 0x00008945) [ 309.968071][T17481] FAT-fs (loop7): Filesystem has been set read-only [ 309.974676][T17481] FAT-fs (loop7): error, invalid access to FAT (entry 0x00008945) [ 309.982730][T17481] FAT-fs (loop7): error, invalid access to FAT (entry 0x00008945) [ 309.990776][T17481] FAT-fs (loop7): error, invalid access to FAT (entry 0x00008945) [ 310.000684][T17481] syz.7.5007: attempt to access beyond end of device [ 310.000684][T17481] loop7: rw=0, sector=35211, nr_sectors = 1 limit=8192 [ 310.014291][T17481] Buffer I/O error on dev loop7, logical block 35211, async page read [ 310.022565][T17481] FAT-fs (loop7): error, invalid access to FAT (entry 0x00008945) [ 310.031456][T17481] FAT-fs (loop7): error, invalid access to FAT (entry 0x00008945) [ 310.039344][T17481] FAT-fs (loop7): error, invalid access to FAT (entry 0x00008945) [ 310.047279][T17481] FAT-fs (loop7): error, invalid access to FAT (entry 0x00008945) [ 310.055148][T17481] FAT-fs (loop7): error, invalid access to FAT (entry 0x00008945) [ 310.063085][T17481] FAT-fs (loop7): error, invalid access to FAT (entry 0x00008945) [ 310.070944][T17481] FAT-fs (loop7): error, invalid access to FAT (entry 0x00008945) [ 310.078800][T17481] FAT-fs (loop7): error, invalid access to FAT (entry 0x00008945) [ 310.086666][T17481] FAT-fs (loop7): error, invalid access to FAT (entry 0x00008945) [ 310.094555][T17481] FAT-fs (loop7): error, invalid access to FAT (entry 0x00008945) [ 310.104492][T17481] FAT-fs (loop7): error, invalid access to FAT (entry 0x00008945) [ 310.112450][T17481] FAT-fs (loop7): error, invalid access to FAT (entry 0x00008945) [ 310.122458][T17481] FAT-fs (loop7): error, invalid access to FAT (entry 0x00008945) [ 310.130442][T17481] FAT-fs (loop7): error, invalid access to FAT (entry 0x00008945) [ 310.138407][T17481] FAT-fs (loop7): error, invalid access to FAT (entry 0x00008945) [ 310.146419][T17481] FAT-fs (loop7): error, invalid access to FAT (entry 0x00008945) [ 310.163130][T17481] syz.7.5007: attempt to access beyond end of device [ 310.163130][T17481] loop7: rw=0, sector=35211, nr_sectors = 1 limit=8192 [ 310.176739][T17481] Buffer I/O error on dev loop7, logical block 35211, async page read [ 310.185187][T15676] team0 (unregistering): Port device team_slave_1 removed [ 310.187880][T17492] sd 0:0:1:0: device reset [ 310.197528][T17492] FAULT_INJECTION: forcing a failure. [ 310.197528][T17492] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 310.210725][T17492] CPU: 1 UID: 0 PID: 17492 Comm: syz.9.5011 Not tainted 6.14.0-rc1-syzkaller-00181-g7ee983c850b4 #0 [ 310.210754][T17492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 310.210767][T17492] Call Trace: [ 310.210773][T17492] [ 310.210779][T17492] dump_stack_lvl+0xf2/0x150 [ 310.210806][T17492] dump_stack+0x15/0x1a [ 310.210885][T17492] should_fail_ex+0x24a/0x260 [ 310.210974][T17492] should_fail+0xb/0x10 [ 310.211010][T17492] should_fail_usercopy+0x1a/0x20 [ 310.211033][T17492] _copy_to_user+0x20/0xa0 [ 310.211109][T17492] simple_read_from_buffer+0xa0/0x110 [ 310.211133][T17492] proc_fail_nth_read+0xf9/0x140 [ 310.211161][T17492] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 310.211185][T17492] vfs_read+0x19b/0x6f0 [ 310.211210][T17492] ? __rcu_read_unlock+0x4e/0x70 [ 310.211254][T17492] ? __fget_files+0x17c/0x1c0 [ 310.211283][T17492] ksys_read+0xe8/0x1b0 [ 310.211304][T17492] __x64_sys_read+0x42/0x50 [ 310.211327][T17492] x64_sys_call+0x2874/0x2dc0 [ 310.211360][T17492] do_syscall_64+0xc9/0x1c0 [ 310.211464][T17492] ? clear_bhb_loop+0x55/0xb0 [ 310.211491][T17492] ? clear_bhb_loop+0x55/0xb0 [ 310.211524][T17492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.211557][T17492] RIP: 0033:0x7fc180c4b7fc [ 310.211574][T17492] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 310.211671][T17492] RSP: 002b:00007fc17f2b7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 310.211691][T17492] RAX: ffffffffffffffda RBX: 00007fc180e65fa0 RCX: 00007fc180c4b7fc [ 310.211705][T17492] RDX: 000000000000000f RSI: 00007fc17f2b70a0 RDI: 0000000000000007 [ 310.211797][T17492] RBP: 00007fc17f2b7090 R08: 0000000000000000 R09: 0000000000000000 [ 310.211854][T17492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 310.211890][T17492] R13: 0000000000000000 R14: 00007fc180e65fa0 R15: 00007ffded0cb3e8 [ 310.211908][T17492] [ 310.430908][T15676] team0 (unregistering): Port device team_slave_0 removed [ 310.480675][T17420] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.487964][T17420] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.497108][T17420] bridge_slave_0: entered allmulticast mode [ 310.503573][T17420] bridge_slave_0: entered promiscuous mode [ 310.511510][T17420] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.518895][T17420] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.538157][T17497] loop7: detected capacity change from 0 to 128 [ 310.552152][T17497] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 310.560053][T17497] FAT-fs (loop7): Filesystem has been set read-only [ 310.568561][T17497] syz.7.5012: attempt to access beyond end of device [ 310.568561][T17497] loop7: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 310.582469][T17497] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 310.590538][T17497] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 310.600721][T17420] bridge_slave_1: entered allmulticast mode [ 310.607406][T17420] bridge_slave_1: entered promiscuous mode [ 310.611655][T17497] syz.7.5012: attempt to access beyond end of device [ 310.611655][T17497] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 310.629687][T17497] syz.7.5012: attempt to access beyond end of device [ 310.629687][T17497] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 310.720063][T17420] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.731660][T17420] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.867673][T17507] loop0: detected capacity change from 0 to 1024 [ 310.874853][T17507] EXT4-fs: Ignoring removed nobh option [ 310.880490][T17507] EXT4-fs: Ignoring removed bh option [ 310.895439][T17420] team0: Port device team_slave_0 added [ 310.902367][T17420] team0: Port device team_slave_1 added [ 311.026761][T17420] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.033782][T17420] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.059824][T17420] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.088212][T17523] loop4: detected capacity change from 0 to 8192 [ 311.095803][T17420] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.102844][T17420] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.129170][T17420] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.161882][T17420] hsr_slave_0: entered promiscuous mode [ 311.168165][T17420] hsr_slave_1: entered promiscuous mode [ 311.174217][T17420] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 311.182186][T17420] Cannot create hsr debugfs directory [ 311.249906][T17529] FAULT_INJECTION: forcing a failure. [ 311.249906][T17529] name failslab, interval 1, probability 0, space 0, times 0 [ 311.262603][T17529] CPU: 1 UID: 0 PID: 17529 Comm: syz.9.5024 Not tainted 6.14.0-rc1-syzkaller-00181-g7ee983c850b4 #0 [ 311.262632][T17529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 311.262662][T17529] Call Trace: [ 311.262670][T17529] [ 311.262680][T17529] dump_stack_lvl+0xf2/0x150 [ 311.262714][T17529] dump_stack+0x15/0x1a [ 311.262784][T17529] should_fail_ex+0x24a/0x260 [ 311.262905][T17529] should_failslab+0x8f/0xb0 [ 311.262934][T17529] __kmalloc_node_noprof+0xad/0x410 [ 311.262970][T17529] ? __kvmalloc_node_noprof+0x72/0x170 [ 311.262993][T17529] ? __rcu_read_unlock+0x4e/0x70 [ 311.263071][T17529] __kvmalloc_node_noprof+0x72/0x170 [ 311.263102][T17529] xt_alloc_entry_offsets+0x47/0x50 [ 311.263135][T17529] translate_table+0xa3/0xf70 [ 311.263155][T17529] ? __memcg_slab_post_alloc_hook+0x510/0x660 [ 311.263215][T17529] ? _copy_from_user+0x89/0xa0 [ 311.263239][T17529] do_ipt_set_ctl+0x7bd/0x8b0 [ 311.263258][T17529] ? tcp_release_cb+0xfe/0x380 [ 311.263421][T17529] nf_setsockopt+0x195/0x1b0 [ 311.263467][T17529] ip_setsockopt+0xea/0x100 [ 311.263492][T17529] tcp_setsockopt+0x93/0xb0 [ 311.263526][T17529] sock_common_setsockopt+0x64/0x80 [ 311.263553][T17529] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 311.263640][T17529] __sys_setsockopt+0x187/0x200 [ 311.263747][T17529] __x64_sys_setsockopt+0x66/0x80 [ 311.263775][T17529] x64_sys_call+0x282e/0x2dc0 [ 311.263863][T17529] do_syscall_64+0xc9/0x1c0 [ 311.263894][T17529] ? clear_bhb_loop+0x55/0xb0 [ 311.263927][T17529] ? clear_bhb_loop+0x55/0xb0 [ 311.263966][T17529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.264066][T17529] RIP: 0033:0x7fc180c4cde9 [ 311.264083][T17529] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 311.264149][T17529] RSP: 002b:00007fc17f2b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 311.264172][T17529] RAX: ffffffffffffffda RBX: 00007fc180e65fa0 RCX: 00007fc180c4cde9 [ 311.264187][T17529] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000007 [ 311.264202][T17529] RBP: 00007fc17f2b7090 R08: 0000000000000570 R09: 0000000000000000 [ 311.264217][T17529] R10: 0000400000000000 R11: 0000000000000246 R12: 0000000000000001 [ 311.264232][T17529] R13: 0000000000000000 R14: 00007fc180e65fa0 R15: 00007ffded0cb3e8 [ 311.264252][T17529] [ 311.498321][T17532] loop7: detected capacity change from 0 to 8192 [ 311.867140][T17551] loop9: detected capacity change from 0 to 128 [ 311.880731][T17551] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 311.888668][T17551] FAT-fs (loop9): Filesystem has been set read-only [ 311.897378][T17551] syz.9.5033: attempt to access beyond end of device [ 311.897378][T17551] loop9: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 311.911195][T17551] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 311.919114][T17551] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 311.933148][T17551] syz.9.5033: attempt to access beyond end of device [ 311.933148][T17551] loop9: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 311.952275][T17420] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 311.960370][T17551] syz.9.5033: attempt to access beyond end of device [ 311.960370][T17551] loop9: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 311.976102][T17420] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 311.987851][T17420] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 312.016972][T17420] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 312.080480][T17420] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.096104][T17420] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.103044][T17563] loop4: detected capacity change from 0 to 512 [ 312.110871][T17563] EXT4-fs: Ignoring removed orlov option [ 312.119689][T10148] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.126868][T10148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.138201][T17563] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 312.148489][T10151] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.155587][T10151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.163752][T17564] FAULT_INJECTION: forcing a failure. [ 312.163752][T17564] name failslab, interval 1, probability 0, space 0, times 0 [ 312.176461][T17564] CPU: 1 UID: 0 PID: 17564 Comm: syz.9.5037 Not tainted 6.14.0-rc1-syzkaller-00181-g7ee983c850b4 #0 [ 312.176493][T17564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 312.176571][T17564] Call Trace: [ 312.176579][T17564] [ 312.176589][T17564] dump_stack_lvl+0xf2/0x150 [ 312.176623][T17564] dump_stack+0x15/0x1a [ 312.176650][T17564] should_fail_ex+0x24a/0x260 [ 312.176693][T17564] should_failslab+0x8f/0xb0 [ 312.176718][T17564] kmem_cache_alloc_node_noprof+0x59/0x320 [ 312.176864][T17564] ? __alloc_skb+0x10b/0x310 [ 312.176889][T17564] __alloc_skb+0x10b/0x310 [ 312.176920][T17564] netlink_alloc_large_skb+0xad/0xe0 [ 312.176992][T17564] netlink_sendmsg+0x3b4/0x6e0 [ 312.177037][T17564] ? __pfx_netlink_sendmsg+0x10/0x10 [ 312.177166][T17564] __sock_sendmsg+0x140/0x180 [ 312.177187][T17564] ____sys_sendmsg+0x312/0x410 [ 312.177267][T17564] __sys_sendmmsg+0x227/0x4b0 [ 312.177400][T17564] __x64_sys_sendmmsg+0x57/0x70 [ 312.177429][T17564] x64_sys_call+0x29aa/0x2dc0 [ 312.177515][T17564] do_syscall_64+0xc9/0x1c0 [ 312.177546][T17564] ? clear_bhb_loop+0x55/0xb0 [ 312.177585][T17564] ? clear_bhb_loop+0x55/0xb0 [ 312.177614][T17564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.177647][T17564] RIP: 0033:0x7fc180c4cde9 [ 312.177737][T17564] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.177878][T17564] RSP: 002b:00007fc17f2b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 312.177896][T17564] RAX: ffffffffffffffda RBX: 00007fc180e65fa0 RCX: 00007fc180c4cde9 [ 312.177910][T17564] RDX: 04000000000001f2 RSI: 0000400000000000 RDI: 0000000000000005 [ 312.178006][T17564] RBP: 00007fc17f2b7090 R08: 0000000000000000 R09: 0000000000000000 [ 312.178021][T17564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.178034][T17564] R13: 0000000000000000 R14: 00007fc180e65fa0 R15: 00007ffded0cb3e8 [ 312.178052][T17564] [ 312.178677][T17563] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 312.187883][T17420] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 312.289511][T17563] EXT4-fs (loop4): orphan cleanup on readonly fs [ 312.292591][T17420] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 312.344527][T17563] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.5036: bg 0: block 248: padding at end of block bitmap is not set [ 312.442915][T17563] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.5036: Failed to acquire dquot type 1 [ 312.458246][T17568] loop7: detected capacity change from 0 to 1024 [ 312.469559][T17568] EXT4-fs: Ignoring removed nobh option [ 312.475383][T17568] EXT4-fs: Ignoring removed bh option [ 312.482252][T17563] EXT4-fs (loop4): 1 truncate cleaned up [ 312.596846][T17420] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 312.704641][T17599] loop9: detected capacity change from 0 to 512 [ 312.733092][T17602] loop0: detected capacity change from 0 to 4096 [ 312.741269][T17599] EXT4-fs: Ignoring removed oldalloc option [ 312.754972][T17599] EXT4-fs error (device loop9): ext4_xattr_inode_iget:436: comm syz.9.5046: Parent and EA inode have the same ino 15 [ 312.779845][T17599] EXT4-fs (loop9): Remounting filesystem read-only [ 312.786568][T17599] EXT4-fs warning (device loop9): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 312.806595][T17599] EXT4-fs (loop9): 1 orphan inode deleted [ 312.822329][T17599] SELinux: (dev loop9, type ext4) getxattr errno 5 [ 312.851325][T17610] tipc: Withdrawal distribution failure [ 312.910250][T17420] veth0_vlan: entered promiscuous mode [ 312.912621][T17615] loop9: detected capacity change from 0 to 2048 [ 312.938832][T17420] veth1_vlan: entered promiscuous mode [ 312.949024][T17561] __nla_validate_parse: 4 callbacks suppressed [ 312.949041][T17561] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5036'. [ 312.966875][T17420] veth0_macvtap: entered promiscuous mode [ 312.974352][T17420] veth1_macvtap: entered promiscuous mode [ 312.982555][T17615] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 313.006912][T17420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.017476][T17420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.027426][T17420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.037881][T17420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.047803][T17420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.058507][T17420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.068598][T17420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.079105][T17420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.088972][T17420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.099447][T17420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.110432][T17420] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 313.119070][T17420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.129628][T17420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.139474][T17420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.149927][T17420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.159814][T17420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.170418][T17420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.180267][T17420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.190804][T17420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.200697][T17420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.211237][T17420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.222272][T17420] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 313.236374][T17420] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.245153][T17420] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.253956][T17420] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.262803][T17420] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.334340][T17635] loop8: detected capacity change from 0 to 512 [ 313.345409][T17635] EXT4-fs error (device loop8): ext4_orphan_get:1389: inode #15: comm syz.8.4987: casefold flag without casefold feature [ 313.359524][T17635] EXT4-fs error (device loop8): ext4_orphan_get:1394: comm syz.8.4987: couldn't read orphan inode 15 (err -117) [ 313.372766][T17635] EXT4-fs mount: 20 callbacks suppressed [ 313.372781][T17635] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 313.510237][T17420] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.527462][T17644] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 313.615759][T17657] sg_write: data in/out 512/2 bytes for SCSI command 0xb7-- guessing data in; [ 313.615759][T17657] program syz.7.5063 not setting count and/or reply_len properly [ 313.649339][T17655] loop4: detected capacity change from 0 to 8192 [ 313.729656][T17662] loop8: detected capacity change from 0 to 1024 [ 313.736603][T17662] EXT4-fs: Ignoring removed nobh option [ 313.742242][T17662] EXT4-fs: Ignoring removed bh option [ 313.780505][T17662] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 313.872693][T16402] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.100207][T17700] loop7: detected capacity change from 0 to 2048 [ 314.119166][T17700] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 314.273268][T13126] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.450594][T17720] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5089'. [ 314.459618][T17720] netlink: 108 bytes leftover after parsing attributes in process `syz.0.5089'. [ 314.469303][T17720] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5089'. [ 314.480092][T17720] netlink: 108 bytes leftover after parsing attributes in process `syz.0.5089'. [ 314.489300][T17720] netlink: 84 bytes leftover after parsing attributes in process `syz.0.5089'. [ 314.501434][T17420] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.535897][T17726] loop8: detected capacity change from 0 to 2048 [ 314.547770][T17726] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 314.579191][T17732] loop4: detected capacity change from 0 to 2048 [ 314.589545][ T29] kauditd_printk_skb: 315 callbacks suppressed [ 314.589563][ T29] audit: type=1326 audit(1738995105.364:26995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17733 comm="syz.7.5095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c1db4cde9 code=0x7ffc0000 [ 314.624751][ T29] audit: type=1326 audit(1738995105.394:26996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17733 comm="syz.7.5095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c1db4cde9 code=0x7ffc0000 [ 314.648508][ T29] audit: type=1326 audit(1738995105.394:26997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17733 comm="syz.7.5095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5c1db4cde9 code=0x7ffc0000 [ 314.653789][T17420] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.672119][ T29] audit: type=1326 audit(1738995105.394:26998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17733 comm="syz.7.5095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c1db4cde9 code=0x7ffc0000 [ 314.704808][ T29] audit: type=1326 audit(1738995105.394:26999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17733 comm="syz.7.5095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c1db4cde9 code=0x7ffc0000 [ 314.728404][ T29] audit: type=1326 audit(1738995105.394:27000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17733 comm="syz.7.5095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7f5c1db4cde9 code=0x7ffc0000 [ 314.751903][ T29] audit: type=1326 audit(1738995105.394:27001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17733 comm="syz.7.5095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c1db4cde9 code=0x7ffc0000 [ 314.787984][T17732] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 314.814172][T17740] sg_write: data in/out 512/2 bytes for SCSI command 0xb7-- guessing data in; [ 314.814172][T17740] program syz.8.5096 not setting count and/or reply_len properly [ 314.846766][T14611] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.872449][T17744] loop9: detected capacity change from 0 to 512 [ 314.879455][T17744] EXT4-fs: Ignoring removed oldalloc option [ 314.890050][T17742] FAULT_INJECTION: forcing a failure. [ 314.890050][T17742] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 314.891067][T17748] loop4: detected capacity change from 0 to 512 [ 314.903238][T17742] CPU: 1 UID: 0 PID: 17742 Comm: syz.7.5098 Not tainted 6.14.0-rc1-syzkaller-00181-g7ee983c850b4 #0 [ 314.903267][T17742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 314.903281][T17742] Call Trace: [ 314.903320][T17742] [ 314.903330][T17742] dump_stack_lvl+0xf2/0x150 [ 314.903394][T17742] dump_stack+0x15/0x1a [ 314.903420][T17742] should_fail_ex+0x24a/0x260 [ 314.903531][T17742] should_fail+0xb/0x10 [ 314.903567][T17742] should_fail_usercopy+0x1a/0x20 [ 314.903686][T17742] strncpy_from_user+0x25/0x210 [ 314.903718][T17742] ? kmem_cache_alloc_noprof+0x18e/0x320 [ 314.903758][T17742] ? getname_flags+0x81/0x3b0 [ 314.903816][T17742] getname_flags+0xb0/0x3b0 [ 314.903852][T17742] getname+0x17/0x20 [ 314.903903][T17742] do_sys_openat2+0x67/0x120 [ 314.903942][T17742] __x64_sys_openat+0xf3/0x120 [ 314.903980][T17742] x64_sys_call+0x2b30/0x2dc0 [ 314.904013][T17742] do_syscall_64+0xc9/0x1c0 [ 314.904082][T17742] ? clear_bhb_loop+0x55/0xb0 [ 314.904115][T17742] ? clear_bhb_loop+0x55/0xb0 [ 314.904151][T17742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.904214][T17742] RIP: 0033:0x7f5c1db4b750 [ 314.904232][T17742] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 314.904254][T17742] RSP: 002b:00007f5c1c1b6f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 314.904277][T17742] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f5c1db4b750 [ 314.904292][T17742] RDX: 0000000000000002 RSI: 00007f5c1c1b6fa0 RDI: 00000000ffffff9c [ 314.904307][T17742] RBP: 00007f5c1c1b6fa0 R08: 0000000000000000 R09: 0000000000000000 [ 314.904321][T17742] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 314.904336][T17742] R13: 0000000000000000 R14: 00007f5c1dd65fa0 R15: 00007ffc6bbd9888 [ 314.904418][T17742] [ 314.955493][T17744] EXT4-fs error (device loop9): ext4_xattr_inode_iget:436: comm syz.9.5100: Parent and EA inode have the same ino 15 [ 314.960280][T17748] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 315.018582][T17744] EXT4-fs (loop9): Remounting filesystem read-only [ 315.059750][T17748] EXT4-fs (loop4): 1 truncate cleaned up [ 315.066629][T17744] EXT4-fs warning (device loop9): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 315.077825][T17748] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.097881][T17744] EXT4-fs (loop9): 1 orphan inode deleted [ 315.120765][ T29] audit: type=1400 audit(1738995105.884:27002): avc: denied { read } for pid=17747 comm="syz.4.5099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 315.128251][T17744] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 315.129890][T17744] SELinux: (dev loop9, type ext4) getxattr errno 5 [ 315.138851][ T29] audit: type=1326 audit(1738995105.894:27003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17760 comm="syz.7.5105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c1db4cde9 code=0x7ffc0000 [ 315.154677][T17744] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.156798][ T29] audit: type=1326 audit(1738995105.894:27004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17760 comm="syz.7.5105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c1db4cde9 code=0x7ffc0000 [ 315.282211][T14611] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.311319][T17763] FAULT_INJECTION: forcing a failure. [ 315.311319][T17763] name failslab, interval 1, probability 0, space 0, times 0 [ 315.324144][T17763] CPU: 0 UID: 0 PID: 17763 Comm: syz.8.5106 Not tainted 6.14.0-rc1-syzkaller-00181-g7ee983c850b4 #0 [ 315.324175][T17763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 315.324191][T17763] Call Trace: [ 315.324198][T17763] [ 315.324206][T17763] dump_stack_lvl+0xf2/0x150 [ 315.324240][T17763] dump_stack+0x15/0x1a [ 315.324329][T17763] should_fail_ex+0x24a/0x260 [ 315.324370][T17763] should_failslab+0x8f/0xb0 [ 315.324429][T17763] kmem_cache_alloc_noprof+0x52/0x320 [ 315.324470][T17763] ? skb_clone+0x154/0x1f0 [ 315.324507][T17763] skb_clone+0x154/0x1f0 [ 315.324569][T17763] __netlink_deliver_tap+0x2bd/0x4f0 [ 315.324616][T17763] netlink_unicast+0x64a/0x670 [ 315.324652][T17763] netlink_sendmsg+0x5cc/0x6e0 [ 315.324761][T17763] ? __pfx_netlink_sendmsg+0x10/0x10 [ 315.324800][T17763] __sock_sendmsg+0x140/0x180 [ 315.324878][T17763] ____sys_sendmsg+0x312/0x410 [ 315.324910][T17763] __sys_sendmsg+0x19d/0x230 [ 315.324952][T17763] __x64_sys_sendmsg+0x46/0x50 [ 315.324981][T17763] x64_sys_call+0x2734/0x2dc0 [ 315.325010][T17763] do_syscall_64+0xc9/0x1c0 [ 315.325054][T17763] ? clear_bhb_loop+0x55/0xb0 [ 315.325115][T17763] ? clear_bhb_loop+0x55/0xb0 [ 315.325158][T17763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.325263][T17763] RIP: 0033:0x7efd7c77cde9 [ 315.325278][T17763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 315.325296][T17763] RSP: 002b:00007efd7ade1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 315.325315][T17763] RAX: ffffffffffffffda RBX: 00007efd7c995fa0 RCX: 00007efd7c77cde9 [ 315.325327][T17763] RDX: 0000000000000000 RSI: 0000400000000100 RDI: 0000000000000006 [ 315.325339][T17763] RBP: 00007efd7ade1090 R08: 0000000000000000 R09: 0000000000000000 [ 315.325351][T17763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 315.325362][T17763] R13: 0000000000000000 R14: 00007efd7c995fa0 R15: 00007ffdf9b27b48 [ 315.325393][T17763] [ 315.563406][T17769] FAULT_INJECTION: forcing a failure. [ 315.563406][T17769] name failslab, interval 1, probability 0, space 0, times 0 [ 315.576155][T17769] CPU: 1 UID: 0 PID: 17769 Comm: syz.9.5109 Not tainted 6.14.0-rc1-syzkaller-00181-g7ee983c850b4 #0 [ 315.576201][T17769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 315.576223][T17769] Call Trace: [ 315.576231][T17769] [ 315.576240][T17769] dump_stack_lvl+0xf2/0x150 [ 315.576274][T17769] dump_stack+0x15/0x1a [ 315.576301][T17769] should_fail_ex+0x24a/0x260 [ 315.576361][T17769] ? audit_log_d_path+0x96/0x250 [ 315.576399][T17769] should_failslab+0x8f/0xb0 [ 315.576430][T17769] __kmalloc_cache_noprof+0x4e/0x320 [ 315.576565][T17769] audit_log_d_path+0x96/0x250 [ 315.576605][T17769] ? __rcu_read_unlock+0x4e/0x70 [ 315.576632][T17769] audit_log_d_path_exe+0x42/0x70 [ 315.576673][T17769] audit_log_task+0x192/0x1c0 [ 315.576789][T17769] audit_seccomp+0x68/0x130 [ 315.576816][T17769] __seccomp_filter+0x6fa/0x1180 [ 315.576843][T17769] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 315.576892][T17769] ? vfs_write+0x644/0x920 [ 315.576917][T17769] ? putname+0xcf/0xf0 [ 315.576953][T17769] __secure_computing+0x9f/0x1c0 [ 315.576976][T17769] syscall_trace_enter+0xd1/0x1f0 [ 315.577053][T17769] ? fpregs_assert_state_consistent+0x83/0xa0 [ 315.577092][T17769] do_syscall_64+0xaa/0x1c0 [ 315.577117][T17769] ? clear_bhb_loop+0x55/0xb0 [ 315.577144][T17769] ? clear_bhb_loop+0x55/0xb0 [ 315.577184][T17769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.577211][T17769] RIP: 0033:0x7fc180c4cde9 [ 315.577241][T17769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 315.577352][T17769] RSP: 002b:00007fc17f2b7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 315.577434][T17769] RAX: ffffffffffffffda RBX: 00007fc180e65fa0 RCX: 00007fc180c4cde9 [ 315.577446][T17769] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 315.577458][T17769] RBP: 00007fc17f2b7090 R08: 0000000000000000 R09: 0000000000000000 [ 315.577470][T17769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 315.577481][T17769] R13: 0000000000000000 R14: 00007fc180e65fa0 R15: 00007ffded0cb3e8 [ 315.577499][T17769] [ 315.941946][T17786] lo speed is unknown, defaulting to 1000 [ 315.963906][T17789] loop8: detected capacity change from 0 to 2048 [ 315.973984][T17779] loop0: detected capacity change from 0 to 128 [ 315.987835][T17779] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 316.004038][T17789] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 316.017108][T17779] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 316.174361][T17420] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.193935][T17795] loop0: detected capacity change from 0 to 1024 [ 316.201967][T17795] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 316.212908][T17795] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 316.227769][T17795] JBD2: no valid journal superblock found [ 316.233555][T17795] EXT4-fs (loop0): Could not load journal inode [ 316.361974][T17799] loop8: detected capacity change from 0 to 1024 [ 316.378904][T17799] EXT4-fs: Ignoring removed nobh option [ 316.384557][T17799] EXT4-fs: Ignoring removed bh option [ 316.435984][T17799] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.539843][T17812] loop0: detected capacity change from 0 to 8192 [ 316.587930][T17420] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.691077][T17827] lo speed is unknown, defaulting to 1000 [ 316.725311][T17829] loop9: detected capacity change from 0 to 2048 [ 316.747739][T17829] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 316.923969][T16402] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.138350][T17856] loop8: detected capacity change from 0 to 2048 [ 317.187325][T17854] loop4: detected capacity change from 0 to 1024 [ 317.202524][T17854] EXT4-fs: Ignoring removed nobh option [ 317.203211][T17856] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 317.208170][T17854] EXT4-fs: Ignoring removed bh option [ 317.360029][T17854] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.390144][T17420] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.410705][T17863] loop7: detected capacity change from 0 to 1024 [ 317.426486][T17863] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 317.437462][T17863] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 317.481948][T17863] JBD2: no valid journal superblock found [ 317.487802][T17863] EXT4-fs (loop7): Could not load journal inode [ 317.495658][T17865] loop8: detected capacity change from 0 to 512 [ 317.506068][T17865] EXT4-fs: Ignoring removed oldalloc option [ 317.518900][T17865] EXT4-fs error (device loop8): ext4_xattr_inode_iget:436: comm syz.8.5142: Parent and EA inode have the same ino 15 [ 317.531868][T17865] EXT4-fs (loop8): Remounting filesystem read-only [ 317.538677][T17865] EXT4-fs warning (device loop8): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 317.562757][T17868] FAULT_INJECTION: forcing a failure. [ 317.562757][T17868] name failslab, interval 1, probability 0, space 0, times 0 [ 317.563885][T17865] EXT4-fs (loop8): 1 orphan inode deleted [ 317.575698][T17868] CPU: 0 UID: 0 PID: 17868 Comm: syz.7.5144 Not tainted 6.14.0-rc1-syzkaller-00181-g7ee983c850b4 #0 [ 317.575760][T17868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 317.575776][T17868] Call Trace: [ 317.575783][T17868] [ 317.575791][T17868] dump_stack_lvl+0xf2/0x150 [ 317.575861][T17868] dump_stack+0x15/0x1a [ 317.575888][T17868] should_fail_ex+0x24a/0x260 [ 317.575929][T17868] should_failslab+0x8f/0xb0 [ 317.575960][T17868] kmem_cache_alloc_noprof+0x52/0x320 [ 317.576080][T17868] ? skb_clone+0x154/0x1f0 [ 317.576119][T17868] skb_clone+0x154/0x1f0 [ 317.576154][T17868] pfkey_sendmsg+0x2de/0x970 [ 317.576225][T17868] ? selinux_socket_sendmsg+0x185/0x1c0 [ 317.576269][T17868] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 317.576310][T17868] __sock_sendmsg+0x140/0x180 [ 317.576410][T17868] ____sys_sendmsg+0x312/0x410 [ 317.576451][T17868] __sys_sendmsg+0x19d/0x230 [ 317.576503][T17868] __x64_sys_sendmsg+0x46/0x50 [ 317.576538][T17868] x64_sys_call+0x2734/0x2dc0 [ 317.576636][T17868] do_syscall_64+0xc9/0x1c0 [ 317.576666][T17868] ? clear_bhb_loop+0x55/0xb0 [ 317.576700][T17868] ? clear_bhb_loop+0x55/0xb0 [ 317.576733][T17868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.576788][T17868] RIP: 0033:0x7f5c1db4cde9 [ 317.576807][T17868] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 317.576829][T17868] RSP: 002b:00007f5c1c1b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 317.576852][T17868] RAX: ffffffffffffffda RBX: 00007f5c1dd65fa0 RCX: 00007f5c1db4cde9 [ 317.576868][T17868] RDX: 0000000020004000 RSI: 00004000000003c0 RDI: 0000000000000006 [ 317.576883][T17868] RBP: 00007f5c1c1b7090 R08: 0000000000000000 R09: 0000000000000000 [ 317.576898][T17868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 317.576913][T17868] R13: 0000000000000000 R14: 00007f5c1dd65fa0 R15: 00007ffc6bbd9888 [ 317.576935][T17868] [ 317.598280][T17870] sg_write: data in/out 512/2 bytes for SCSI command 0xb7-- guessing data in; [ 317.598280][T17870] program syz.0.5143 not setting count and/or reply_len properly [ 317.602934][T17865] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 317.804574][T17865] SELinux: (dev loop8, type ext4) getxattr errno 5 [ 317.816786][T17865] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.844571][T17879] loop0: detected capacity change from 0 to 2048 [ 317.896016][T14611] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.896154][T17879] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 317.927679][T17885] loop9: detected capacity change from 0 to 2048 [ 317.940710][T17889] loop7: detected capacity change from 0 to 2048 [ 317.951645][T11482] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.048928][T17885] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 318.061151][T17894] loop4: detected capacity change from 0 to 8192 [ 318.068347][T17889] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 318.089413][T17885] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 318.181921][T17899] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5153'. [ 318.191075][T17899] netlink: 108 bytes leftover after parsing attributes in process `syz.8.5153'. [ 318.247314][T17899] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5153'. [ 318.315405][T13126] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.381987][T17899] netlink: 108 bytes leftover after parsing attributes in process `syz.8.5153'. [ 318.391277][T17899] netlink: 84 bytes leftover after parsing attributes in process `syz.8.5153'. [ 318.404365][T17901] lo speed is unknown, defaulting to 1000 [ 318.590238][T17913] netlink: 'syz.7.5157': attribute type 4 has an invalid length. [ 318.598187][T17913] netlink: 17 bytes leftover after parsing attributes in process `syz.7.5157'. [ 318.745993][T17914] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5157'. [ 318.884034][T17885] syz.9.5150 (17885) used greatest stack depth: 6208 bytes left [ 318.893435][T16402] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.975955][T17931] loop7: detected capacity change from 0 to 128 [ 318.994236][T17933] loop8: detected capacity change from 0 to 2048 [ 319.016358][T17931] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 319.024239][T17931] FAT-fs (loop7): Filesystem has been set read-only [ 319.032930][T17931] syz.7.5163: attempt to access beyond end of device [ 319.032930][T17931] loop7: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 319.048118][T17931] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 319.052747][T17934] loop9: detected capacity change from 0 to 1024 [ 319.056131][T17931] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 319.079271][T17934] EXT4-fs: Ignoring removed nobh option [ 319.084967][T17934] EXT4-fs: Ignoring removed bh option [ 319.089543][T17931] syz.7.5163: attempt to access beyond end of device [ 319.089543][T17931] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 319.110303][T17931] syz.7.5163: attempt to access beyond end of device [ 319.110303][T17931] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 319.115413][T17934] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.139321][T17933] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 319.283493][T17420] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.292755][T17950] loop7: detected capacity change from 0 to 8192 [ 319.297355][T17951] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5169'. [ 319.308164][T17951] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5169'. [ 319.317614][T17951] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5169'. [ 319.786556][T16402] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.008737][T17980] loop9: detected capacity change from 0 to 128 [ 320.045165][T17980] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 320.076429][T17980] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 320.150489][ T29] kauditd_printk_skb: 211 callbacks suppressed [ 320.150509][ T29] audit: type=1326 audit(1738995110.924:27216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17981 comm="syz.0.5182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb7330cde9 code=0x7ffc0000 [ 320.181575][ T29] audit: type=1326 audit(1738995110.954:27217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17981 comm="syz.0.5182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcb7330cde9 code=0x7ffc0000 [ 320.205317][ T29] audit: type=1326 audit(1738995110.954:27218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17981 comm="syz.0.5182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb7330cde9 code=0x7ffc0000 [ 320.229079][ T29] audit: type=1326 audit(1738995110.954:27219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17981 comm="syz.0.5182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb7330cde9 code=0x7ffc0000 [ 320.252990][ T29] audit: type=1326 audit(1738995110.954:27220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17981 comm="syz.0.5182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcb7330cde9 code=0x7ffc0000 [ 320.253031][ T29] audit: type=1326 audit(1738995110.954:27221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17981 comm="syz.0.5182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb7330cde9 code=0x7ffc0000 [ 320.253091][ T29] audit: type=1326 audit(1738995110.954:27222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17981 comm="syz.0.5182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb7330cde9 code=0x7ffc0000 [ 320.253119][ T29] audit: type=1326 audit(1738995110.954:27223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17981 comm="syz.0.5182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcb7330cde9 code=0x7ffc0000 [ 320.253145][ T29] audit: type=1326 audit(1738995110.954:27224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17981 comm="syz.0.5182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb7330cde9 code=0x7ffc0000 [ 320.253173][ T29] audit: type=1326 audit(1738995110.954:27225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17981 comm="syz.0.5182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fcb7330cde9 code=0x7ffc0000 [ 320.324935][T15675] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 320.451824][T17994] loop0: detected capacity change from 0 to 2048 [ 320.595108][T17994] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 320.760687][T11482] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.761331][T18021] loop7: detected capacity change from 0 to 128 [ 320.850301][T18021] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 320.858304][T18021] FAT-fs (loop7): Filesystem has been set read-only [ 320.871044][T18021] syz.7.5195: attempt to access beyond end of device [ 320.871044][T18021] loop7: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 320.897649][T18021] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 320.905636][T18021] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 320.919678][T18021] syz.7.5195: attempt to access beyond end of device [ 320.919678][T18021] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 320.933576][T18021] syz.7.5195: attempt to access beyond end of device [ 320.933576][T18021] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 321.000819][T18031] loop8: detected capacity change from 0 to 2048 [ 321.018105][T18031] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 321.037925][T18031] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 321.119771][T18051] lo speed is unknown, defaulting to 1000 [ 321.140747][T18050] lo speed is unknown, defaulting to 1000 [ 321.163722][T18052] FAULT_INJECTION: forcing a failure. [ 321.163722][T18052] name failslab, interval 1, probability 0, space 0, times 0 [ 321.176695][T18052] CPU: 1 UID: 0 PID: 18052 Comm: syz.0.5206 Not tainted 6.14.0-rc1-syzkaller-00181-g7ee983c850b4 #0 [ 321.176723][T18052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 321.176769][T18052] Call Trace: [ 321.176777][T18052] [ 321.176785][T18052] dump_stack_lvl+0xf2/0x150 [ 321.176814][T18052] dump_stack+0x15/0x1a [ 321.176833][T18052] should_fail_ex+0x24a/0x260 [ 321.176871][T18052] ? find_css_set+0x577/0xd60 [ 321.176905][T18052] should_failslab+0x8f/0xb0 [ 321.176935][T18052] __kmalloc_cache_noprof+0x4e/0x320 [ 321.176970][T18052] find_css_set+0x577/0xd60 [ 321.177058][T18052] ? evict+0x50e/0x570 [ 321.177082][T18052] cgroup_migrate_prepare_dst+0x75/0x3e0 [ 321.177140][T18052] cgroup_attach_task+0x1c2/0x460 [ 321.177184][T18052] __cgroup_procs_write+0x1f2/0x250 [ 321.177257][T18052] ? __pfx_cgroup_procs_write+0x10/0x10 [ 321.177290][T18052] cgroup_procs_write+0x29/0x50 [ 321.177323][T18052] ? __pfx_cgroup_procs_write+0x10/0x10 [ 321.177429][T18052] cgroup_file_write+0x16f/0x320 [ 321.177462][T18052] ? __check_object_size+0x364/0x520 [ 321.177554][T18052] ? __pfx_cgroup_file_write+0x10/0x10 [ 321.177587][T18052] kernfs_fop_write_iter+0x1c8/0x2c0 [ 321.177625][T18052] vfs_write+0x77b/0x920 [ 321.177675][T18052] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 321.177787][T18052] ksys_write+0xe8/0x1b0 [ 321.177810][T18052] __x64_sys_write+0x42/0x50 [ 321.177831][T18052] x64_sys_call+0x287e/0x2dc0 [ 321.177859][T18052] do_syscall_64+0xc9/0x1c0 [ 321.177883][T18052] ? clear_bhb_loop+0x55/0xb0 [ 321.177963][T18052] ? clear_bhb_loop+0x55/0xb0 [ 321.177990][T18052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.178017][T18052] RIP: 0033:0x7fcb7330cde9 [ 321.178032][T18052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 321.178051][T18052] RSP: 002b:00007fcb71950038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 321.178069][T18052] RAX: ffffffffffffffda RBX: 00007fcb73526080 RCX: 00007fcb7330cde9 [ 321.178093][T18052] RDX: 0000000000000012 RSI: 0000400000000080 RDI: 000000000000000a [ 321.178105][T18052] RBP: 00007fcb71950090 R08: 0000000000000000 R09: 0000000000000000 [ 321.178117][T18052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 321.178129][T18052] R13: 0000000000000000 R14: 00007fcb73526080 R15: 00007ffce97e7258 [ 321.178146][T18052] [ 321.481199][T18057] loop9: detected capacity change from 0 to 1024 [ 321.490545][T18057] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 321.501547][T18057] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 321.568166][T18057] JBD2: no valid journal superblock found [ 321.573952][T18057] EXT4-fs (loop9): Could not load journal inode [ 321.622390][T18060] lo speed is unknown, defaulting to 1000 [ 322.152274][T18083] loop0: detected capacity change from 0 to 2048 [ 322.238677][T18083] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 322.669744][T11482] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.765329][T18098] loop7: detected capacity change from 0 to 8192 [ 322.793257][T18098] FAT-fs (loop7): error, invalid access to FAT (entry 0x00008945) [ 322.801152][T18098] FAT-fs (loop7): Filesystem has been set read-only [ 322.807923][T18098] FAT-fs (loop7): error, invalid access to FAT (entry 0x00008945) [ 322.815910][T18098] FAT-fs (loop7): error, invalid access to FAT (entry 0x00008945) [ 322.823738][T18098] FAT-fs (loop7): error, invalid access to FAT (entry 0x00008945) [ 322.913755][T18102] loop0: detected capacity change from 0 to 512 [ 322.932778][T18098] syz.7.5221: attempt to access beyond end of device [ 322.932778][T18098] loop7: rw=0, sector=35211, nr_sectors = 1 limit=8192 [ 322.946296][T18098] Buffer I/O error on dev loop7, logical block 35211, async page read [ 322.954532][T18098] FAT-fs (loop7): error, invalid access to FAT (entry 0x00008945) [ 323.033366][T18102] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 323.052147][T18102] EXT4-fs (loop0): orphan cleanup on readonly fs [ 323.065102][T18102] EXT4-fs warning (device loop0): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 323.078496][T18098] FAT-fs (loop7): error, invalid access to FAT (entry 0x00008945) [ 323.081972][T18102] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 323.087675][T18098] FAT-fs (loop7): error, invalid access to FAT (entry 0x00008945) [ 323.094755][T18102] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.5223: bg 0: block 40: padding at end of block bitmap is not set [ 323.102148][T18098] FAT-fs (loop7): error, invalid access to FAT (entry 0x00008945) [ 323.124226][T18098] FAT-fs (loop7): error, invalid access to FAT (entry 0x00008945) [ 323.132080][T18098] FAT-fs (loop7): error, invalid access to FAT (entry 0x00008945) [ 323.139963][T18098] FAT-fs (loop7): error, invalid access to FAT (entry 0x00008945) [ 323.147810][T18098] FAT-fs (loop7): error, invalid access to FAT (entry 0x00008945) [ 323.155792][T18098] FAT-fs (loop7): error, invalid access to FAT (entry 0x00008945) [ 323.163609][T18098] FAT-fs (loop7): error, invalid access to FAT (entry 0x00008945) [ 323.171751][T18098] FAT-fs (loop7): error, invalid access to FAT (entry 0x00008945) [ 323.179614][T18098] FAT-fs (loop7): error, invalid access to FAT (entry 0x00008945) [ 323.228798][T18102] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 323.237897][T18102] EXT4-fs (loop0): 1 truncate cleaned up [ 323.243637][T18098] FAT-fs (loop7): error, invalid access to FAT (entry 0x00008945) [ 323.251704][T18098] FAT-fs (loop7): error, invalid access to FAT (entry 0x00008945) [ 323.259728][T18098] FAT-fs (loop7): error, invalid access to FAT (entry 0x00008945) [ 323.267646][T18098] FAT-fs (loop7): error, invalid access to FAT (entry 0x00008945) [ 323.278214][T18102] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 323.311061][T18098] syz.7.5221: attempt to access beyond end of device [ 323.311061][T18098] loop7: rw=0, sector=35211, nr_sectors = 1 limit=8192 [ 323.324598][T18098] Buffer I/O error on dev loop7, logical block 35211, async page read [ 323.379606][T18102] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #16: comm syz.0.5223: corrupted xattr block 31: invalid header [ 323.416029][T18031] syz.8.5199 (18031) used greatest stack depth: 6112 bytes left [ 323.426717][T17420] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.436697][T18102] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=16 [ 323.454461][T18122] FAULT_INJECTION: forcing a failure. [ 323.454461][T18122] name failslab, interval 1, probability 0, space 0, times 0 [ 323.467191][T18122] CPU: 1 UID: 0 PID: 18122 Comm: syz.7.5227 Not tainted 6.14.0-rc1-syzkaller-00181-g7ee983c850b4 #0 [ 323.467220][T18122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 323.467234][T18122] Call Trace: [ 323.467242][T18122] [ 323.467296][T18122] dump_stack_lvl+0xf2/0x150 [ 323.467374][T18122] dump_stack+0x15/0x1a [ 323.467394][T18122] should_fail_ex+0x24a/0x260 [ 323.467430][T18122] ? alloc_pipe_info+0xb0/0x360 [ 323.467515][T18122] should_failslab+0x8f/0xb0 [ 323.467543][T18122] __kmalloc_cache_noprof+0x4e/0x320 [ 323.467673][T18122] alloc_pipe_info+0xb0/0x360 [ 323.467771][T18122] splice_direct_to_actor+0x60f/0x670 [ 323.467797][T18122] ? __pfx_direct_splice_actor+0x10/0x10 [ 323.467823][T18122] ? selinux_file_permission+0x327/0x360 [ 323.467851][T18122] do_splice_direct+0xd7/0x150 [ 323.467874][T18122] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 323.467984][T18122] do_sendfile+0x398/0x660 [ 323.468068][T18122] __x64_sys_sendfile64+0xbd/0x150 [ 323.468114][T18122] x64_sys_call+0xfbd/0x2dc0 [ 323.468191][T18122] do_syscall_64+0xc9/0x1c0 [ 323.468218][T18122] ? clear_bhb_loop+0x55/0xb0 [ 323.468249][T18122] ? clear_bhb_loop+0x55/0xb0 [ 323.468348][T18122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.468389][T18122] RIP: 0033:0x7f5c1db4cde9 [ 323.468414][T18122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 323.468445][T18122] RSP: 002b:00007f5c1c1b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 323.468466][T18122] RAX: ffffffffffffffda RBX: 00007f5c1dd65fa0 RCX: 00007f5c1db4cde9 [ 323.468480][T18122] RDX: 0000400000000100 RSI: 0000000000000007 RDI: 0000000000000003 [ 323.468494][T18122] RBP: 00007f5c1c1b7090 R08: 0000000000000000 R09: 0000000000000000 [ 323.468514][T18122] R10: 0000000000010001 R11: 0000000000000246 R12: 0000000000000001 [ 323.468528][T18122] R13: 0000000000000000 R14: 00007f5c1dd65fa0 R15: 00007ffc6bbd9888 [ 323.468548][T18122] [ 323.721935][T18131] loop9: detected capacity change from 0 to 1024 [ 323.732501][T18131] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 323.743606][T18131] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 323.757269][T18131] JBD2: no valid journal superblock found [ 323.763092][T18131] EXT4-fs (loop9): Could not load journal inode [ 323.776242][T11482] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.820417][T18146] loop9: detected capacity change from 0 to 512 [ 323.831583][T18144] loop7: detected capacity change from 0 to 512 [ 323.962663][T18146] EXT4-fs (loop9): too many log groups per flexible block group [ 323.970406][T18146] EXT4-fs (loop9): failed to initialize mballoc (-12) [ 323.978635][T18144] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 324.035147][T18144] ext4 filesystem being mounted at /380/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 324.065066][T18146] EXT4-fs (loop9): mount failed [ 324.101840][T18144] __nla_validate_parse: 11 callbacks suppressed [ 324.101888][T18144] netlink: 3 bytes leftover after parsing attributes in process `syz.7.5238'. [ 324.151167][T18163] loop4: detected capacity change from 0 to 512 [ 324.162297][T18144] 0ªX¹¦À: renamed from caif0 [ 324.168604][T18163] EXT4-fs error (device loop4): ext4_get_journal_inode:5798: comm syz.4.5242: inode #16777216: comm syz.4.5242: iget: illegal inode # [ 324.186592][T18144] 0ªX¹¦À: entered allmulticast mode [ 324.191864][T18144] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 324.212250][T18163] EXT4-fs (loop4): no journal found [ 324.217679][T18163] EXT4-fs (loop4): can't get journal size [ 324.281866][T18163] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 324.298503][T13126] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.311453][T18163] EXT4-fs (loop4): failed to initialize system zone (-22) [ 324.319930][T18163] EXT4-fs (loop4): mount failed [ 324.690375][T18167] loop0: detected capacity change from 0 to 1024 [ 324.699029][T18167] EXT4-fs: Ignoring removed bh option [ 324.718348][T18167] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 324.731160][T18167] ext4 filesystem being mounted at /525/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 324.744533][T18167] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.5244: bg 0: block 273: padding at end of block bitmap is not set [ 325.093860][T18185] loop7: detected capacity change from 0 to 1024 [ 325.103784][T18184] loop4: detected capacity change from 0 to 512 [ 325.112417][T18185] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 325.123471][T18185] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 325.145904][T11482] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.174430][ T29] kauditd_printk_skb: 257 callbacks suppressed [ 325.174449][ T29] audit: type=1326 audit(1738995115.944:27480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18181 comm="syz.9.5247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc180c4cde9 code=0x7ffc0000 [ 325.208824][T18185] JBD2: no valid journal superblock found [ 325.214580][T18185] EXT4-fs (loop7): Could not load journal inode [ 325.224141][T18184] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 325.234290][T18184] EXT4-fs (loop4): group descriptors corrupted! [ 325.263010][ T29] audit: type=1326 audit(1738995116.024:27481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18187 comm="syz.9.5250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc180c4cde9 code=0x7ffc0000 [ 325.286891][ T29] audit: type=1326 audit(1738995116.024:27482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18187 comm="syz.9.5250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc180c4cde9 code=0x7ffc0000 [ 325.310543][ T29] audit: type=1326 audit(1738995116.024:27483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18187 comm="syz.9.5250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc180c4cde9 code=0x7ffc0000 [ 325.334265][ T29] audit: type=1326 audit(1738995116.024:27484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18187 comm="syz.9.5250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc180c4cde9 code=0x7ffc0000 [ 325.357936][ T29] audit: type=1326 audit(1738995116.024:27485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18187 comm="syz.9.5250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc180c4cde9 code=0x7ffc0000 [ 325.374269][T18190] loop8: detected capacity change from 0 to 128 [ 325.381569][ T29] audit: type=1326 audit(1738995116.024:27486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18187 comm="syz.9.5250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7fc180c4cde9 code=0x7ffc0000 [ 325.411418][ T29] audit: type=1326 audit(1738995116.024:27487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18187 comm="syz.9.5250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc180c4cde9 code=0x7ffc0000 [ 325.429703][T18190] EXT4-fs warning (device loop8): ext4_init_metadata_csum:4624: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 325.435081][ T29] audit: type=1326 audit(1738995116.024:27488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18187 comm="syz.9.5250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc180c4cde9 code=0x7ffc0000 [ 325.448510][T18190] EXT4-fs (loop8): Couldn't mount because of unsupported optional features (fffc1829) [ 325.471924][ T29] audit: type=1326 audit(1738995116.024:27489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18187 comm="syz.9.5250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc180c4cde9 code=0x7ffc0000 [ 325.513048][T18192] loop9: detected capacity change from 0 to 128 [ 325.544092][T18192] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 325.552114][T18192] FAT-fs (loop9): Filesystem has been set read-only [ 325.559232][T18192] syz.9.5252: attempt to access beyond end of device [ 325.559232][T18192] loop9: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 325.573026][T18192] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 325.580984][T18192] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 325.669276][T18201] loop8: detected capacity change from 0 to 2048 [ 325.686697][T18192] syz.9.5252: attempt to access beyond end of device [ 325.686697][T18192] loop9: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 325.702324][T18192] syz.9.5252: attempt to access beyond end of device [ 325.702324][T18192] loop9: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 325.724332][T18196] loop7: detected capacity change from 0 to 8192 [ 325.727766][T18192] syz.9.5252: attempt to access beyond end of device [ 325.727766][T18192] loop9: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 325.734829][T18202] 9pnet: Could not find request transport: 0xffffffffffffffff [ 325.747133][T18201] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 325.763730][T18201] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 326.375349][T18197] ================================================================== [ 326.383561][T18197] BUG: KCSAN: data-race in mark_buffer_dirty_inode / sync_mapping_buffers [ 326.392100][T18197] [ 326.394437][T18197] write to 0xffff888106247878 of 8 bytes by task 18196 on cpu 1: [ 326.402171][T18197] sync_mapping_buffers+0x159/0x7c0 [ 326.407386][T18197] fat_file_fsync+0xa7/0x100 [ 326.412007][T18197] vfs_fsync_range+0x116/0x130 [ 326.416802][T18197] generic_file_write_iter+0x1c3/0x310 [ 326.422277][T18197] iter_file_splice_write+0x5f1/0x980 [ 326.427688][T18197] direct_splice_actor+0x160/0x2c0 [ 326.432832][T18197] splice_direct_to_actor+0x302/0x670 [ 326.438230][T18197] do_splice_direct+0xd7/0x150 [ 326.443016][T18197] do_sendfile+0x398/0x660 [ 326.447460][T18197] __x64_sys_sendfile64+0x110/0x150 [ 326.452695][T18197] x64_sys_call+0xfbd/0x2dc0 [ 326.457306][T18197] do_syscall_64+0xc9/0x1c0 [ 326.461828][T18197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.467753][T18197] [ 326.470100][T18197] read to 0xffff888106247878 of 8 bytes by task 18197 on cpu 0: [ 326.477749][T18197] mark_buffer_dirty_inode+0x96/0x1c0 [ 326.483197][T18197] fat16_ent_put+0x4f/0x60 [ 326.487642][T18197] fat_ent_write+0x66/0xe0 [ 326.492073][T18197] fat_chain_add+0x15f/0x400 [ 326.496686][T18197] fat_get_block+0x46b/0x5e0 [ 326.501300][T18197] __block_write_begin_int+0x417/0xfa0 [ 326.506790][T18197] cont_write_begin+0x546/0x860 [ 326.511764][T18197] fat_write_begin+0x51/0xe0 [ 326.516402][T18197] cont_write_begin+0x18b/0x860 [ 326.521275][T18197] fat_write_begin+0x51/0xe0 [ 326.525898][T18197] generic_perform_write+0x1a8/0x4a0 [ 326.531217][T18197] __generic_file_write_iter+0xa1/0x120 [ 326.536781][T18197] generic_file_write_iter+0x8f/0x310 [ 326.542180][T18197] vfs_write+0x77b/0x920 [ 326.546438][T18197] __x64_sys_pwrite64+0xf6/0x150 [ 326.551399][T18197] x64_sys_call+0xab0/0x2dc0 [ 326.556022][T18197] do_syscall_64+0xc9/0x1c0 [ 326.560553][T18197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.566469][T18197] [ 326.568805][T18197] value changed: 0xffff888106271d08 -> 0x0000000000000000 [ 326.575929][T18197] [ 326.578266][T18197] Reported by Kernel Concurrency Sanitizer on: [ 326.584523][T18197] CPU: 0 UID: 0 PID: 18197 Comm: syz.7.5253 Not tainted 6.14.0-rc1-syzkaller-00181-g7ee983c850b4 #0 [ 326.595316][T18197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 326.605388][T18197] ================================================================== [ 327.216679][T17420] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.