last executing test programs: 1m14.626322363s ago: executing program 2 (id=269): sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x537b}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80008}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00'}, 0xd) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@abort}, {@noload}, {@noload}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") 1m11.395123312s ago: executing program 2 (id=310): creat(&(0x7f0000000100)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002340)=ANY=[@ANYBLOB="170000000000000004000000fe"], 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0xc2200, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/128, 0x80}], 0x1, 0x7a, 0x9) r1 = socket(0x10, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x11, r2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c010000", @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb08000300"], 0x2c}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0a000000040000000800", @ANYRES64=r1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES8, @ANYBLOB="000090be89e6340000000000000000000000000000000038fe"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) unshare(0x68060200) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) 1m11.206538311s ago: executing program 2 (id=314): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair(0x18, 0x0, 0x2, 0x0) 1m11.065510151s ago: executing program 2 (id=315): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x500, &(0x7f0000000500)="$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") syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) stat(&(0x7f0000000140)='./file1\x00', &(0x7f0000001900)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendto$inet(r0, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf405, 0x0, 0xf06) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000700)={0x0, "f0176c04daeeae36e66c27a087f4a4c936987def00657e2ca9bfd8ef1caacc368637ae59c0b06ded2010b44fde59071c58350e27c03bb4abbda22349eef8fcbf", 0x1d}, 0x48, 0x0) r1 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) lsetxattr$security_capability(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040), &(0x7f00000001c0)=@v2={0x2000000, [{0xc, 0x4}, {0x9, 0x1}]}, 0x14, 0x0) add_key(&(0x7f0000000340)='dns_resolver\x00', &(0x7f0000000540)={'syz', 0x1}, &(0x7f0000000580)="fb9c", 0xfffff, r1) 1m10.87919031s ago: executing program 2 (id=318): perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x44}}, 0x0) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1m10.291822078s ago: executing program 2 (id=323): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) rename(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) fsync(r2) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x700, 0xfffffffffffffffe}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r3}, &(0x7f00000004c0), &(0x7f0000000500)='%-5lx \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) uname(0xfffffffffffffffc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x840) mkdir(0x0, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) flock(r4, 0x5) 1m10.285689458s ago: executing program 32 (id=323): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) rename(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) fsync(r2) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x700, 0xfffffffffffffffe}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r3}, &(0x7f00000004c0), &(0x7f0000000500)='%-5lx \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) uname(0xfffffffffffffffc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x840) mkdir(0x0, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) flock(r4, 0x5) 2.313254438s ago: executing program 3 (id=1258): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="be2205f95cd0", 'veth1_to_batadv\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x2, @empty, 'veth1_to_bridge\x00'}}, 0x1e) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x0, @random="7c9ab5135269", 'pim6reg0\x00'}}, 0x1e) 2.206823707s ago: executing program 3 (id=1260): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000fcffffff0000000000000000850000004100000085"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2111, 0x300, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (fail_nth: 1) 1.988847337s ago: executing program 3 (id=1263): r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDSKBLED(r0, 0x4b65, 0x1) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCL_BLANKSCREEN(r1, 0x541c, &(0x7f0000000000)) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000440)={0x0, 0x0, 0xb, 0xb, 0x21, &(0x7f0000000040)="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"}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x11, 0x2b, &(0x7f00000004c0)=@raw=[@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3eeb}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5cf5}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffc}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x4}, @tail_call, @tail_call, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10001}}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x7}, @tail_call], &(0x7f0000000640)='GPL\x00', 0x1, 0x1000, &(0x7f0000000680)=""/4096, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001680)={0x5, 0xb, 0x6, 0x7ff}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000016c0)=[0x1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x0, 0x2, 0x6, 0x6}], 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001800)={&(0x7f0000000480)='rxrpc_local\x00', r2, 0x0, 0x7}, 0x18) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000001840), 0x4) close_range(r1, r3, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000001900)=@nat={'nat\x00', 0x1b, 0x5, 0x518, 0x2c8, 0x2c8, 0xffffffff, 0x0, 0x2c8, 0x480, 0x480, 0xffffffff, 0x480, 0x480, 0x5, &(0x7f0000001880), {[{{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xa, @private=0xa010101, @broadcast, @icmp_id=0x66, @icmp_id=0x67}}}}, {{@ip={@multicast1, @local, 0xff, 0x0, 'geneve0\x00', 'pimreg0\x00', {0xff}, {}, 0x32, 0x3, 0x55}, 0x0, 0xd0, 0x108, 0x0, {}, [@common=@set={{0x40}, {{0x4, [0x4, 0x0, 0x7, 0x0, 0x5, 0x4], 0x3, 0x4}}}, @common=@socket0={{0x20}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x1, @dev={0xac, 0x14, 0x14, 0x36}, @rand_addr=0x64010101, @gre_key=0x8, @icmp_id=0x65}}}}, {{@uncond, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0x4, [0x1, 0x3, 0x0, 0x4, 0x6, 0x2], 0x3, 0x1}}}, @common=@ah={{0x30}, {[0x3, 0x7], 0x1}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @remote, @multicast1, @gre_key=0xe2, @icmp_id=0x67}}}}, {{@uncond, 0x0, 0x180, 0x1b8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0xa, 0x64, 'fsm\x00', "fa390b9302b99784ab76f30c8dd3be32a2045a96e743c524a16dda1d831deca9c5049b544e1058843d9fd4e542fe82d3ccf5a3b881e1749753b392837b2e57dccf1bb7c808b7c3c185a194b6b55208d3c54bf3fefc7c9625b153fd64464dab27d0d232072337daaf13522dc724b9eaa722d1d923407807b97ce4ca6ac62c7393", 0x29, 0x1, {0x10}}}, @common=@osf={{0x50}, {'syz0\x00', 0x0, 0x2}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x1, @remote, @multicast2, @port=0x4e24, @gre_key=0xc2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x578) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) accept4(r3, &(0x7f0000001e80)=@rc={0x1f, @none}, &(0x7f0000001f00)=0x80, 0x80000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001f80)={&(0x7f0000001f40)='block_bio_remap\x00', r2, 0x0, 0x1}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000001fc0)='\'+{\'-\'(&\x00') r4 = socket$igmp6(0xa, 0x3, 0x2) r5 = syz_clone(0x20000100, &(0x7f0000002000), 0x0, &(0x7f0000002040), &(0x7f0000002080), &(0x7f00000020c0)="211391d3899dba1fcd059cf5c87324fcc6c0ddfd98dc5d1b88ef7d848b5e59136e80b21a80b3b1153ea31b58f87092296e802c31d058199df0ac7f77d5cfc6dda1d8b261eb03d9415894bb6a3ba29c657b0345748723d6232849638ecf98ff581f8be3e821b7392f5f032a68d782317e39eaf1726521136826e5db95598923d8a478403a4bb59f06d0a126469da5461ecaede628819cdd92b78d5d405ae8e0b5a01a7ba3e7d333fc8cc6a9324bc528c64f70a1eea9ffa5423288fad4357012a1e45f8fc17f07") sched_rr_get_interval(r5, &(0x7f00000021c0)) r6 = syz_open_procfs(r5, &(0x7f0000002200)='net/snmp\x00') clock_gettime(0x0, &(0x7f0000002280)={0x0, 0x0}) epoll_pwait2(r6, &(0x7f0000002240)=[{}, {}, {}, {}, {}], 0x5, &(0x7f00000022c0)={r7, r8+60000000}, &(0x7f0000002300)={[0x3]}, 0x8) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000024c0)={0x18, 0xf, &(0x7f0000002380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_fd={0x18, 0x8, 0x1, 0x0, r6}]}, &(0x7f0000002400)='GPL\x00', 0xd87, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f0000002440)=[{0x1, 0x1, 0x5, 0xc}, {0x4, 0x4, 0xd, 0x5}, {0x0, 0x2, 0xf, 0x4}, {0x3, 0x5, 0xb, 0x8}, {0x3, 0x4, 0x4, 0x8}, {0x5, 0x3, 0x9, 0x3}, {0x1, 0x1, 0xd, 0x8}], 0x10, 0x4, @void, @value}, 0x94) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002580)={&(0x7f0000002340)='devlink_hwerr\x00', r9, 0x0, 0x5}, 0x18) syz_emit_ethernet(0xe8, &(0x7f00000025c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}, @val={@void, {0x8100, 0x6, 0x1, 0x1}}, {@llc_tr={0x11, {@snap={0xaa, 0x0, "84", "24ed33", 0x88a8, "04b1910299ce88c2fdcc1b3bcbab929dc0cf6046f4efae2701dffbdf0076063449e27b2d69321fc2e0145765bad5587b2584ebb5dd448adc452e87e36f30ec22b9ef1c0d095248c5fdb63155303feaf6381006259c741cd05f50e67f9cc945a5195bfbbe855170d2bd31c38ca5bfdfaf2bdbde484d857a59c6f98e531721b8e15b09de2142427e31270e2cfbe23d4172755c9f8cca6f176b9914a2d50fa00acd85f5b2416600c6eb4887fdef3b7ac39f683a10ff9e95dab9b15f8ec58ee199f2267789866ee36034c92ccbbe9f3e"}}}}}, &(0x7f00000026c0)={0x0, 0x3, [0x56b, 0x386, 0x2d3, 0xc14]}) sched_setparam(r5, &(0x7f0000002700)=0x5) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, &(0x7f0000002740)={0x4, 0x4, 0x5, 0x79da0b7c, 0x2, 0x9}) ioctl$IMSETDEVNAME(r6, 0x80184947, &(0x7f0000002780)={0x2, 'syz1\x00'}) open(&(0x7f00000027c0)='./file0\x00', 0x82, 0x40) r11 = gettid() kcmp(r5, r11, 0x2, r10, r2) 1.740566186s ago: executing program 3 (id=1266): r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0900000004000000ff0f00000500000000000000", @ANYRES16=r0, @ANYBLOB="000000000041d6bf42d2f3a8d900000000000000a3f53b846609a61b68865a2793afa5808df150c9dbf8eafc4b3387edf78c85a3608cff6aa5880fc12da1552edb9f5f69741ef5b3ebff7e9645fc4867e579fbc157004897375eb647d61041d5c8e3c8904a28b5f8360b5736b2870cb5a9235f749724407d22bb8959bac59aad85aaad1a0c8f3f3ff4f4766fe1e8d6236e0c98df3ea1a1d3d937d1ccd5ff678ec60fc1d30674e59ad7fd6ef5", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) timer_create(0x0, &(0x7f0000000280)={0x0, 0x3, 0x1, @thr={&(0x7f0000000540)="ea33b664a24fed6c1849bcf55e46eefad4399a8f8704274ae24db4de3627996bd60969db19921298468404ab7fdc318ee448d6615446c3db69cc4b11d16cf17a03b935fea58fc00f27bb09c5d497bb591a12cc0b5372413d412ba278437f7affdd4c3a4d3cc4e5fc3c767deb7f650d66ae47709e4600bc3929447848f276aae0862d4decba69e4d03e76b55234dd16497dfbca103b00eff04b66e1d4b4fa7d2ce55893a7", &(0x7f0000000780)="8270b8d17b11d70b771f6a30143178fb6c3b856a4491b0748e1909d16800d225df361591ddaf2fa9bce32ee4fa889baa9d55b1c23ae98d7b44015c50d2a8bc771371f163d567ad7c68a7a3416279339ed2bf9d4db95959c854be4a4bd78c85780b9702dfe3e5cf39743e4b64a6c1bc85f17584569245480961cd47fb4fd54894c84889c3469c0b9369a5b5f1a6f9a115f0352ae3408ade6491c59f9bfd353635df94e9f884b64d006fa3020d151eee023de4b32432ecef29400a00c28f8f2faa5805ffe78ec38e3a8db422b640f6eb433df001c946128197a549a4e16f4a4db352ca3ad5e5"}}, &(0x7f0000000300)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) futex(&(0x7f0000000180), 0x5, 0x0, 0x0, &(0x7f0000000000), 0xaffffffa) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000040a3a470000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000100000000000000002000d9c4000085000000860000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) 1.720221956s ago: executing program 0 (id=1267): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000e5ffff06020000f8ffffffb703000000000000b70400c209000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r0, &(0x7f0000000780)}, 0x20) 1.584747065s ago: executing program 0 (id=1269): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="b00000", @ANYRES16=r1, @ANYBLOB="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"], 0xb0}, 0x1, 0x0, 0x0, 0x4084}, 0x2004c044) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e000000000000000400"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002940)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="00000000000000009d08a200000000000007020000f8ffffff000000b7040000000000008500000057000000950000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000b40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x6, &(0x7f0000000080)=[{0x1, 0x8, 0xf8}, {0x800, 0x10, 0x7, 0x2}, {0x3, 0x0, 0x2, 0x7}, {0x85f5, 0xff, 0x3, 0x7fff}, {0xc, 0x3, 0xa, 0x3}, {0x1, 0x9, 0x3, 0x7}]}) sync() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000f00)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40042, 0x1fe) write$binfmt_script(r5, &(0x7f0000000280)={'#! ', './file1'}, 0xb) close(r5) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'\x00', 0x2}) ioctl$TUNSETOFFLOAD(r6, 0x400454c9, 0x13) ioctl$TUNSETOWNER(r6, 0x400454cc, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r5, 0x84, 0x65, &(0x7f0000000200)=[@in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e21, 0x2, @empty, 0x2}, @in6={0xa, 0x4e22, 0xbdf, @private0, 0x2}, @in6={0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1ff8000}, @in={0x2, 0x3, @empty}, @in6={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x25}, 0xff}, @in6={0xa, 0x4e23, 0x48000000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}], 0xac) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000080)={{{@in=@multicast2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {0x0, 0x0, 0x400000000000000}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in, 0x0, 0x32}, 0x0, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0xb7, 0xb1, 0x0, 0x80000000}}, 0xe8) sendmmsg$sock(r3, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000180)="8a12da83a90ce58dd824a7ef573c81b7aeca7359222b977043770abacd4529644263b9300535b0defd1768a5430392b3e3897bc023d992dd56bf4a7f0f8f08", 0x3f}, {&(0x7f0000000300)="0447e76a10e7dadc02f08d7609fa7caf15332391940ba8bd83839b4e69f8aae70e1b2bfd6aec1d93647df8ea52974e7767e2a6724a1f4a22bf5f1e3082e3e94cc8d37188353af691ef2d829c5d7f0aca0d8492c21c7b19e803da0775721c9e8e51ad0281714588a561eef032fee589518cbca5f0ade6e6687a23460f8c285148ec44c0ea86aeb6ffc2a58b889eeaf6136f34931bb96621", 0x97}, {&(0x7f00000003c0)}, {&(0x7f00000004c0)="10b72de67dcfab746852f5ae0e97d0d8fe63c731d10e4688f4df4474eaf31d6d9636510abf48b7733e2b999e36b8bb8b6162aa156a41d02a6dc41d961507e2e7db81df3f88e282013a9c93a9f1509e52f6dae69b725a6cab7727c71dae8edac6da81d9007f96d4f687c809bc9b5c5269faa047c0a0defc885c1bf48d50ff027feadf08c7da66c1cb89352629c6c9a5ef833746c3d8594a86cbe74eacd0c961ba", 0xa0}, {&(0x7f0000000440)="0016603160dd2900ebf9", 0xa}], 0x5, &(0x7f0000000600)=[@timestamping={{0x14, 0x1, 0x25, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x80}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffff801}}, @mark={{0x14, 0x1, 0x24, 0x8000}}, @mark={{0x14, 0x1, 0x24, 0x1d7ff367}}], 0x90}}, {{&(0x7f00000006c0)=@llc={0x1a, 0x339, 0x2, 0x4, 0x1, 0x8, @multicast}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000740)="7f8f0e721ba1b0825c945511a78eba83d6f198d30e7d94e086b0e72493d40b99a7dd08889140dcbd8b3bebd8c066830aac8e0fe8431649040679c9147916fc9ca26efd5867bef03c3f60c27d1085d4bc21a8a712d62abc7ab8d79e8908", 0x5d}, {&(0x7f0000000a40)="40ce7bcfabb54531a5b28d308047573f29d7954a8aa03d012796a80dd250193a3ba6a7ac85ed6d0e9de358ead4fbe6df45483dfbb26cd543079b59eb8a1f7d620bfb9412a515cc251313b82e93a17e51f76bc1e992d89229b24d96ff404339230a8e", 0x62}], 0x2, &(0x7f0000000800)=[@mark={{0x14, 0x1, 0x24, 0xffffd88a}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @txtime={{0x18}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}], 0x60}}], 0x2, 0x8d5) sendmmsg(r3, &(0x7f0000000180), 0x400000000000077, 0x0) 1.279829294s ago: executing program 1 (id=1278): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32], 0x48) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010000000004"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 1.276522604s ago: executing program 5 (id=1280): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006d00011c8500"/20, @ANYRES32=r5, @ANYBLOB="000000000000000018003480140035"], 0x38}, 0x1, 0x0, 0x0, 0x40090}, 0x4804) 1.242517044s ago: executing program 5 (id=1281): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000020000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001a0000000c00018008000100", @ANYRES32=r3], 0x20}}, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1018e58, &(0x7f0000000180)={[{@data_ordered}, {@grpid}]}, 0x22, 0x63f, &(0x7f0000000d80)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='kmem_cache_free\x00', r6}, 0x18) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x536, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffff7, 0x8, 0x0, 0x10000000, 0xfffffffc, 0x8000}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}], {0x14}}, 0x64}}, 0x0) open$dir(&(0x7f0000000100)='./file1\x00', 0x0, 0x51) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r9 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), r7) r10 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="1800"/15, @ANYRES64=r0, @ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x50, &(0x7f0000000480)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYRES64=r9, @ANYRES8=r11], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r12, 0x0, 0x178}, 0x18) 1.207211494s ago: executing program 1 (id=1282): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000020007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) syz_open_procfs(r1, &(0x7f0000000180)='timerslack_ns\x00') (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r2}, 0x10) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 849.403153ms ago: executing program 1 (id=1284): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000840)='./file0\x00', 0x801, &(0x7f0000000080), 0x64, 0x518, &(0x7f0000000200)="$eJzs3c9vG1kdAPDvOHa3adNNFjjASiwLuyitoHayYXcjDssiITitBCz3EhIniuLEUezsNlFFU/EHICEESJzgwgWJPwAJVeLCESFVgjMIEAhBCwcO0EG2J2l+jBO3uHEafz7SZN57M+Pve45mPG/maSaAofVyRLwdEQ/TNL0WEeNZeSGbYqcztdZ7cP/WfGtKIk3f/XsSSVa2+1lJNr+cbXYxIr76pYhvJEfjNra2V+ZqtepGlq80V9crja3t68urc0vVperazMz0G7Nvzr4+O9WXdl6JiLe+8OfvffsnX3zrF59+/w83/nr1m61qjWXL97fjMRWPW9hpeqn9XezfYOMJg51FxXYLM6N5a4wcKbnzlOsEAEC+1jn+ByLiExFxLcZj5PjTWQAAAOAZlH5uLP6TRKT5LnQpBwAAAJ4hhfYY2KRQzsYCjEWhUC53xvB+KC4VavVG81OL9c21hc5Y2YkoFRaXa9WpbKzwRJSSVn66nX6Uf+1QfiYiXoiI746PtvPl+XptYdAXPwAAAGBIXD7U///XeKf/DwAAAJwzE4OuAAAAAPDU6f8DAADA+af/DwAAAOfal995pzWlu++/Xnhva3Ol/t71hWpjpby6OV+er2+sl5fq9aX2M/tWT/q8Wr2+/plY27xZaVYbzUpja/vGan1zrXlj+cArsAEAAIBT9MLH7v4uiYidz462p5YLvW3a42rAWVXcSyXZPGe3/v3znfmfTqlSwKkYGXQFgIEpDroCwMCUBl0BYOCSg9kj3YKug3d+nc0/3v86AQAA/TX5ke73/wvHbrlz/GLgzLMTw/By/x+GV/v+f68jeZ0swLlScgYAQ2/f/f/0ds7yE+//nyhNH79WAABAP421p6RQzi7vjUWhUC5HXGm/FqCULC7XqlMR8XxE/Ha89FwrP93eMjk8ZhgAAAAAAAAAAAAAAAAAAAAAAAAA6CJNk0gBAACAcy2i8Jfkl51n+U+Ovzp2+PrAheTf45G9IvT9H777/ZtzzebGdKv8H3vlzR9k5a8N4goGAAAADIXHeoH/bj99tx8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP304P6t+d3pNOP+7fMRMZEXvxgX2/OLUYqIS/9MorhvuyQiRvoQf7T158N58ZNWtfZC5sUf7UP8nTvHxo+J7FvIi3+5D/FhmN1tHX/eztv/CvFye56//xUjDuSfVPfjX+wd/0a67P9Xeozx4r2fVbrGvxPxYjH/+LMbP+kS/5Ue43/9a9vb3ZalP4qYzP39SQ7EqjRX1yuNre3ry6tzS9Wl6trMzPQbs2/Ovj47VVlcrlWzv/FcTozvfPTnD49r/6Uu8SdOaP+rPbb/v/du3v9gJ1nKi3/1lZz4v/pxtsbR+IXst++TWbq1fHI3vdNJ7/fST3/z0nHtX+jS/pP+/1d7bP+1r3zrjz2uCgCcgsbW9spcrVbdOLeJVi/9DFRD4gwmbvf1A9M0TVv71P/xOUmcha+lnRj0kQkAAOi3Ryf9g64JAAAAAAAAAAAAAAAAAAAADK/TeJzY4Zg7e6mkH4/QBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoi/8FAAD//z742t0=") r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) write$tun(r0, &(0x7f0000000240)=ANY=[], 0xffe) 819.685132ms ago: executing program 3 (id=1285): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, 0x0, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="be2205f95cd0", 'veth1_to_batadv\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x2, @empty, 'veth1_to_bridge\x00'}}, 0x1e) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x0, @random="7c9ab5135269", 'pim6reg0\x00'}}, 0x1e) 785.892002ms ago: executing program 3 (id=1286): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r1 = syz_io_uring_setup(0x29c9, &(0x7f0000000680)={0x0, 0x770, 0x0, 0x1, 0x1dd}, &(0x7f0000000000)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0xa, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x7ff, 0x1000}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) 731.314932ms ago: executing program 1 (id=1287): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x401, 0x3}]}) r3 = creat(&(0x7f0000000200)='./file0\x00', 0x109) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 703.200342ms ago: executing program 4 (id=1288): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000", 0x36}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 654.933552ms ago: executing program 0 (id=1289): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000840)='./file0\x00', 0x801, &(0x7f0000000080), 0x64, 0x518, &(0x7f0000000200)="$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") r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) write$tun(r0, &(0x7f0000000240)=ANY=[], 0xffe) (fail_nth: 1) 599.138472ms ago: executing program 4 (id=1290): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r1}, 0x18) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x0) shutdown(r2, 0x0) 304.189881ms ago: executing program 4 (id=1291): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYRES8, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r2}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x418, 0x210, 0x940c, 0x3002, 0x0, 0x2c0, 0x348, 0x3d8, 0x3d8, 0x348, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1c8, 0x210, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0x6}}, @common=@inet=@recent0={{0xf8}, {0x0, 0xc58, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x10, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x478) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./bus\x00', 0x100c000, &(0x7f0000000780)={[{@jqfmt_vfsv1}, {}, {@barrier_val}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@nodelalloc}, {@acl}, {@abort}]}, 0xfc, 0x572, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hvSuj6TKadKx14PbgXnyRIYg4EP8A330c/gP+FQMdDBlFH0So3PSmy9qkv5aZbPl84Lbn5N7bc78593t7Tm5CAhhYx7IfhYiXI+KbJOJQy7pi5CuPrW63/PD6VLYksbLy6Z9JJPljze2T/PeBvPJSRPz6VcTJwsZ2a4tLs+VKJZ3P62P1uStjtcWlU5fmyjPpTHp5YnLyzFuTE+++83bXYn39/N/ff3L3wzNfH1/+7uf7h28ncTYO5uta43gCN1orx8r/5qXhOLtuw/EuNNZPkl4fALsylOf5cGTXgEMxlGc98Pz7MiJWgAGVyH8YUM1xQHNu36V58DPjwQerE6BG7COt8RdXXxuJvY250f7l5LGZUTbfHe1C+1kbv/xx53a2xOavQ+zbog6wIzduRsTpYnHj9T/Jr3+7d7rx4vHm1rcxaP9/oJfuZuOfN9qN/wpr459oM/450CZ3d2Pr/C/c70IzHWXjv/fajn/XLl2jQ3nthcaYbzi5eKmSno6IFyPiRAzvyeqb3c85s3xvpdO61vFftmTtN8eC+XHcL+55fJ/pcr0cESNPEnfTg5sRrxTbxZ+s9X/Spv+z5+P8Nts4mt55tdO6reN/ulZ+initbf8/uqOVbH5/cqxxPow1z4qN/rp19LdO7fc6/qz/928e/2jSer+2tvM2ftz7T9pp3W7P/5Hks0a5mQTXyvX6/HjESPLxxscnHu3brDe3z+I/cXzz61+78z+bfH2+zfhvHbnVcdN+6P/pHfX/zgv3Pvrih07tb6//32yUTuSP5Ne/9vJzZbsH+KTPHwAAAAAAAPSTQkQcjKRQWisXCqXS6vs7jsT+QqVaq5+8WF24PB2Nz8qOxnCheaf7UMv7Icbz98M26xPr6pMRcTgivh3a16iXpqqV6V4HDwAAAAAAAAAAAAAAAAAAAH3iQIfP/2d+H+r10QFPXeOLDfb0+iiAXtjyK/+78U1PQF/aMv+B55b8h8El/2FwyX8YXPIfBpf8h8El/2FwyX8AAAAAAAAAAAAAAAAAAAAAAAAAAADoqvPnzmXLyvLD61NZffrq4sJs9eqp6bQ2W5pbmCpNVeevlGaq1ZlKWpqqzm319yrV6pXxiVi4NlZPa/Wx2uLShbnqwuX6hUtz5Zn0Qjr8v0QFAAAAAAAAAAAAAAAAAAAAz5ba4tJsuVJJ5xU6Ft6PvjiMpxngql3tXuyXKBQ6FG7m3buzvXp4UQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAdf4LAAD//++4Mnc=") r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x1fe) fallocate(r4, 0x78, 0x401, 0x800000000000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) r5 = io_uring_setup(0x2f61, &(0x7f00000000c0)={0x0, 0xed99, 0x200, 0x4003, 0xe5}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f00000002c0)={0xb0000008}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0x1f49, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000630163000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000080)=0x9) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYRESOCT], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioprio_set$pid(0x1, 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) sendfile(r8, r8, 0x0, 0xfffe80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r7}, 0x10) r9 = socket(0x5, 0x1, 0x1) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f0000000000)={0x11, @multicast1, 0x0, 0x1000002, 'lblcr\x00'}, 0x2c) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000ec0000000000000000000000000000d7cbd9139e30ddad460000000000000000000000a8adbe3a96992c2444e512b17d7fc5508113a3fb2c637d8f658ee71bdb82ec29aaeaeb5152f6cefa796b0a7d39a6fa16e98527c0b64101487fb8d875b8fd"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="70843418000000080000000033ad7aee5d76fd37", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085100000f5ffffffbf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0xd, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @sk_reuseport=0x27, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 281.390581ms ago: executing program 1 (id=1292): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x8000000, &(0x7f00000005c0)="85e20a3ec2e894b891738d4dddf20faa1b1f7dc3313e27af18bac26e769decfec2a002c2b5ad95a088bee888842e09fc678a18913236a16a88dac94900c003d1f68e5f89136e52c09ba2c7ade7c08151f63d9cb6be263785ed3b7111753225f1b6e396ffc3d7b0f887973a30cad262a6d872eed994198d9c26e4795214885697cf47f153bdb1dca2798a", 0x8a, 0x0, &(0x7f00000006c0), 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x1, 0xb, &(0x7f0000000000)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) sendmsg$unix(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x20040000) sendmsg$unix(r1, 0x0, 0x40011) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0xa042, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "a05c7b5d00008023e9c5bcf5ff7700"}) r7 = syz_open_pts(r0, 0x0) dup3(r7, r0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 251.747511ms ago: executing program 5 (id=1293): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$ARCH_SHSTK_ENABLE(0x4207, r2, 0x0, 0x5001) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) clock_nanosleep(0x9, 0x0, 0x0, 0x0) 197.45982ms ago: executing program 0 (id=1294): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000180), &(0x7f0000000300)=r1}, 0x20) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x101a00, 0x0) fgetxattr(r2, &(0x7f00000002c0)=@known='security.selinux\x00', 0x0, 0x0) 196.95182ms ago: executing program 1 (id=1295): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000000)={[{@shortname_winnt}, {@utf8no}, {@fat=@check_strict}, {@fat=@discard}, {@utf8}, {@fat=@nfs}, {@shortname_win95}, {@shortname_lower}, {@utf8}]}, 0xfd, 0x2a0, &(0x7f0000000540)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r6, 0x1, 0x4000, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000050}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r9 = socket(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r9, &(0x7f0000000380)={0x1d, r10, 0x1, {0x2}}, 0x18) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000002c0)={@multicast1, @rand_addr, 0x0}, &(0x7f0000000300)=0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r0, &(0x7f0000000800)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)=@RTM_DELMDB={0x118, 0x55, 0x100, 0x70bd27, 0x25dfdbff, {0x7, r1}, [@MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x0, 0x3, 0x3, {@in6_addr=@mcast2, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x1, 0x0, 0x3, {@ip4=@empty, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x0, 0x2, 0x3, {@in6_addr=@private2, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r7, 0x1, 0x0, 0x2, {@in6_addr=@empty, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r8, 0x0, 0x1, 0x0, {@in6_addr=@mcast2, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r10, 0x1, 0x0, 0x2, {@ip4=@local}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r11, 0x0, 0x0, 0x0, {@in6_addr=@private0={0xfc, 0x0, '\x00', 0x1}}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r12, 0x0, 0x2, 0x1, {@ip4=@loopback, 0x1c809}}}]}, 0x118}, 0x1, 0x0, 0x0, 0x48000}, 0x40010) 178.54698ms ago: executing program 5 (id=1296): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, 0x0, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="be2205f95cd0", 'veth1_to_batadv\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x2, @empty, 'veth1_to_bridge\x00'}}, 0x1e) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x0, @random="7c9ab5135269", 'pim6reg0\x00'}}, 0x1e) 153.80368ms ago: executing program 4 (id=1297): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_setup(0xd3f, &(0x7f0000000000)={0x0, 0x400000}, 0x0, 0x0) pipe2(0x0, 0x4800) ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000000900)={'geneve1\x00', @random='\x00\x00\x00 \x00'}) 144.92061ms ago: executing program 0 (id=1298): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x101a00, 0x0) fgetxattr(r1, &(0x7f00000002c0)=@known='security.selinux\x00', 0x0, 0x0) 93.77608ms ago: executing program 5 (id=1299): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r1, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="be", 0x1}], 0x1}}], 0x1, 0x24008094) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r2, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) (fail_nth: 1) 93.35729ms ago: executing program 0 (id=1300): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="b00000", @ANYRES16=r1, @ANYBLOB="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"], 0xb0}, 0x1, 0x0, 0x0, 0x4084}, 0x2004c044) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e000000000000000400"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002940)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="00000000000000009d08a200000000000007020000f8ffffff000000b7040000000000008500000057000000950000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000b40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x6, &(0x7f0000000080)=[{0x1, 0x8, 0xf8}, {0x800, 0x10, 0x7, 0x2}, {0x3, 0x0, 0x2, 0x7}, {0x85f5, 0xff, 0x3, 0x7fff}, {0xc, 0x3, 0xa, 0x3}, {0x1, 0x9, 0x3, 0x7}]}) sync() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000f00)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40042, 0x1fe) write$binfmt_script(r5, &(0x7f0000000280)={'#! ', './file1'}, 0xb) close(r5) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'\x00', 0x2}) ioctl$TUNSETOFFLOAD(r6, 0x400454c9, 0x13) ioctl$TUNSETOWNER(r6, 0x400454cc, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r5, 0x84, 0x65, &(0x7f0000000200)=[@in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e21, 0x2, @empty, 0x2}, @in6={0xa, 0x4e22, 0xbdf, @private0, 0x2}, @in6={0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1ff8000}, @in={0x2, 0x3, @empty}, @in6={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x25}, 0xff}, @in6={0xa, 0x4e23, 0x48000000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}], 0xac) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000080)={{{@in=@multicast2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {0x0, 0x0, 0x400000000000000}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in, 0x0, 0x32}, 0x0, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0xb7, 0xb1, 0x0, 0x80000000}}, 0xe8) sendmmsg$sock(r3, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000180)="8a12da83a90ce58dd824a7ef573c81b7aeca7359222b977043770abacd4529644263b9300535b0defd1768a5430392b3e3897bc023d992dd56bf4a7f0f8f08", 0x3f}, {&(0x7f0000000300)="0447e76a10e7dadc02f08d7609fa7caf15332391940ba8bd83839b4e69f8aae70e1b2bfd6aec1d93647df8ea52974e7767e2a6724a1f4a22bf5f1e3082e3e94cc8d37188353af691ef2d829c5d7f0aca0d8492c21c7b19e803da0775721c9e8e51ad0281714588a561eef032fee589518cbca5f0ade6e6687a23460f8c285148ec44c0ea86aeb6ffc2a58b889eeaf6136f34931bb96621", 0x97}, {&(0x7f00000003c0)}, {&(0x7f00000004c0)="10b72de67dcfab746852f5ae0e97d0d8fe63c731d10e4688f4df4474eaf31d6d9636510abf48b7733e2b999e36b8bb8b6162aa156a41d02a6dc41d961507e2e7db81df3f88e282013a9c93a9f1509e52f6dae69b725a6cab7727c71dae8edac6da81d9007f96d4f687c809bc9b5c5269faa047c0a0defc885c1bf48d50ff027feadf08c7da66c1cb89352629c6c9a5ef833746c3d8594a86cbe74eacd0c961ba", 0xa0}, {&(0x7f0000000440)="0016603160dd2900ebf9", 0xa}], 0x5, &(0x7f0000000600)=[@timestamping={{0x14, 0x1, 0x25, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x80}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffff801}}, @mark={{0x14, 0x1, 0x24, 0x8000}}, @mark={{0x14, 0x1, 0x24, 0x1d7ff367}}], 0x90}}, {{&(0x7f00000006c0)=@llc={0x1a, 0x339, 0x2, 0x4, 0x1, 0x8, @multicast}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000740)="7f8f0e721ba1b0825c945511a78eba83d6f198d30e7d94e086b0e72493d40b99a7dd08889140dcbd8b3bebd8c066830aac8e0fe8431649040679c9147916fc9ca26efd5867bef03c3f60c27d1085d4bc21a8a712d62abc7ab8d79e8908", 0x5d}, {&(0x7f0000000a40)="40ce7bcfabb54531a5b28d308047573f29d7954a8aa03d012796a80dd250193a3ba6a7ac85ed6d0e9de358ead4fbe6df45483dfbb26cd543079b59eb8a1f7d620bfb9412a515cc251313b82e93a17e51f76bc1e992d89229b24d96ff404339230a8e", 0x62}], 0x2, &(0x7f0000000800)=[@mark={{0x14, 0x1, 0x24, 0xffffd88a}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @txtime={{0x18}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}], 0x60}}], 0x2, 0x8d5) sendmmsg(r3, &(0x7f0000000180), 0x400000000000077, 0x0) 92.96946ms ago: executing program 4 (id=1301): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r1}, 0x18) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x0) shutdown(r2, 0x0) 34.68778ms ago: executing program 5 (id=1302): r0 = socket$inet6(0xa, 0x3, 0xff) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xe}}, './file0\x00'}) socket$can_bcm(0x1d, 0x2, 0x2) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0xd, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r10}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50000000}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x0, 0xffff}, &(0x7f00000001c0)=0x8) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)=""/176, 0xb0}], 0x1}, 0x6e}], 0x1, 0x2, 0x0) socket(0x11, 0xa, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11}}}}}, 0x0) 0s ago: executing program 4 (id=1303): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r1, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="be", 0x1}], 0x1}}], 0x1, 0x24008094) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r2, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): ngth (339) for dns_resolver key [ 84.554907][ T8244] Invalid option length (339) for dns_resolver key [ 84.598271][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 84.600981][ T8259] loop4: detected capacity change from 0 to 1024 [ 84.615861][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 84.627445][ T8259] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 84.647100][ T8259] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.680: Invalid block bitmap block 0 in block_group 0 [ 84.667605][ T8259] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.680: Failed to acquire dquot type 0 [ 84.686935][ T8259] EXT4-fs error (device loop4): ext4_free_blocks:6589: comm syz.4.680: Freeing blocks not in datazone - block = 0, count = 4096 [ 84.705309][ T8262] loop3: detected capacity change from 0 to 8192 [ 84.711017][ T8259] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.680: Invalid inode bitmap blk 0 in block_group 0 [ 84.711906][ T8262] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿS®^F† Ö]3ó4/‡8vЩXÙåã "¡Úhù\o‘ËC:ÀÛdôQ;Œ/àwÚ*é•·­ì»ÚzÄ|Ñþ6Ý /]%:n•eF4Å°+ðÑy®ê…ˆà' [ 84.726070][ T3798] EXT4-fs error (device loop4): ext4_release_dquot:6961: comm kworker/u8:14: Failed to release dquot type 0 [ 84.772948][ T8259] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 84.776658][ T8266] devtmpfs: Unknown parameter 'dirsyncÁ.è' [ 84.798776][ T8259] EXT4-fs (loop4): 1 orphan inode deleted [ 84.807624][ T8259] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.828037][ T8259] netlink: 4 bytes leftover after parsing attributes in process `syz.4.680'. [ 84.841393][ T8259] EXT4-fs error (device loop4): ext4_lookup:1813: inode #15: comm syz.4.680: iget: bad extra_isize 65535 (inode size 256) [ 84.918357][ T8278] loop3: detected capacity change from 0 to 1024 [ 84.933324][ T8281] tap0: tun_chr_ioctl cmd 1074025676 [ 84.938788][ T8281] tap0: owner set to 0 [ 84.949962][ T8278] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.015127][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.090079][ T8301] netlink: 12 bytes leftover after parsing attributes in process `syz.3.688'. [ 85.141552][ T8311] futex_wake_op: syz.3.690 tries to shift op by -1; fix this program [ 85.271382][ T29] kauditd_printk_skb: 1094 callbacks suppressed [ 85.271464][ T29] audit: type=1326 audit(1734476868.237:8528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8258 comm="syz.4.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f31ebc5cce7 code=0x7ffc0000 [ 85.301142][ T29] audit: type=1326 audit(1734476868.237:8529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8258 comm="syz.4.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f31ebc01f29 code=0x7ffc0000 [ 85.324385][ T29] audit: type=1326 audit(1734476868.237:8530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8258 comm="syz.4.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f31ebc65d29 code=0x7ffc0000 [ 85.440396][ T8323] hub 2-0:1.0: USB hub found [ 85.445324][ T8323] hub 2-0:1.0: 8 ports detected [ 85.493687][ T29] audit: type=1326 audit(1734476868.297:8531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8258 comm="syz.4.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f31ebc5cce7 code=0x7ffc0000 [ 85.517036][ T29] audit: type=1326 audit(1734476868.297:8532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8258 comm="syz.4.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f31ebc01f29 code=0x7ffc0000 [ 85.540319][ T29] audit: type=1326 audit(1734476868.297:8533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8258 comm="syz.4.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f31ebc65d29 code=0x7ffc0000 [ 85.563765][ T29] audit: type=1326 audit(1734476868.297:8534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8258 comm="syz.4.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f31ebc5cce7 code=0x7ffc0000 [ 85.586990][ T29] audit: type=1326 audit(1734476868.297:8535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8258 comm="syz.4.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f31ebc01f29 code=0x7ffc0000 [ 85.610280][ T29] audit: type=1326 audit(1734476868.297:8536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8258 comm="syz.4.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f31ebc65d29 code=0x7ffc0000 [ 85.633575][ T29] audit: type=1326 audit(1734476868.297:8537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8258 comm="syz.4.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f31ebc5cce7 code=0x7ffc0000 [ 85.713221][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.909564][ T8368] loop4: detected capacity change from 0 to 8192 [ 85.916578][ T8368] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿS®^F† Ö]3ó4/‡8vЩXÙåã "¡Úhù\o‘ËC:ÀÛdôQ;Œ/àwÚ*é•·­ì»ÚzÄ|Ñþ6Ý /]%:n•eF4Å°+ðÑy®ê…ˆà' [ 85.967877][ T8376] loop1: detected capacity change from 0 to 1024 [ 85.999424][ T8378] hub 8-0:1.0: USB hub found [ 86.011161][ T8378] hub 8-0:1.0: 8 ports detected [ 86.033015][ T8376] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.078039][ T8386] syz.3.701[8386] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 86.078095][ T8386] syz.3.701[8386] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 86.089601][ T8386] syz.3.701[8386] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 86.138747][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.169377][ T8393] loop4: detected capacity change from 0 to 256 [ 86.176993][ T8392] loop3: detected capacity change from 0 to 1024 [ 86.191695][ T8393] FAT-fs (loop4): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 86.194245][ T5623] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.211034][ T8392] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 86.229268][ T8392] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.702: Invalid block bitmap block 0 in block_group 0 [ 86.247295][ T8392] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.702: Failed to acquire dquot type 0 [ 86.255818][ T8399] loop1: detected capacity change from 0 to 1024 [ 86.259318][ T8392] EXT4-fs error (device loop3): ext4_free_blocks:6589: comm syz.3.702: Freeing blocks not in datazone - block = 0, count = 4096 [ 86.278651][ T8392] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.702: Invalid inode bitmap blk 0 in block_group 0 [ 86.279342][ T8399] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 86.291418][ T8392] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 86.301722][ T332] EXT4-fs error (device loop3): ext4_release_dquot:6961: comm kworker/u8:5: Failed to release dquot type 0 [ 86.321580][ T8392] EXT4-fs (loop3): 1 orphan inode deleted [ 86.327705][ T8392] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.349979][ T8392] netlink: 4 bytes leftover after parsing attributes in process `syz.3.702'. [ 86.361648][ T8392] EXT4-fs error (device loop3): ext4_lookup:1813: inode #15: comm syz.3.702: iget: bad extra_isize 65535 (inode size 256) [ 86.377412][ T8399] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.703: Invalid block bitmap block 0 in block_group 0 [ 86.395480][ T8409] tap0: tun_chr_ioctl cmd 1074025676 [ 86.400898][ T8409] tap0: owner set to 0 [ 86.428122][ T8399] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.703: Failed to acquire dquot type 0 [ 86.456259][ T8399] EXT4-fs error (device loop1): ext4_free_blocks:6589: comm syz.1.703: Freeing blocks not in datazone - block = 0, count = 4096 [ 86.471754][ T8399] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.703: Invalid inode bitmap blk 0 in block_group 0 [ 86.500297][ T3803] EXT4-fs error (device loop1): ext4_release_dquot:6961: comm kworker/u8:16: Failed to release dquot type 0 [ 86.512030][ T8399] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 86.525866][ T8399] EXT4-fs (loop1): 1 orphan inode deleted [ 86.535520][ T8399] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.581876][ T8399] netlink: 4 bytes leftover after parsing attributes in process `syz.1.703'. [ 86.600014][ T8399] EXT4-fs error (device loop1): ext4_lookup:1813: inode #15: comm syz.1.703: iget: bad extra_isize 65535 (inode size 256) [ 86.632533][ T8426] loop4: detected capacity change from 0 to 8192 [ 86.639651][ T8426] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿS®^F† Ö]3ó4/‡8vЩXÙåã "¡Úhù\o‘ËC:ÀÛdôQ;Œ/àwÚ*é•·­ì»ÚzÄ|Ñþ6Ý /]%:n•eF4Å°+ðÑy®ê…ˆà' [ 86.740883][ T8442] hub 8-0:1.0: USB hub found [ 86.751512][ T8442] hub 8-0:1.0: 8 ports detected [ 86.914976][ T9] hid (null): unknown global tag 0xd [ 86.922867][ T9] hid-generic 0006:0008:0006.0002: unexpected long global item [ 86.932857][ T9] hid-generic 0006:0008:0006.0002: probe with driver hid-generic failed with error -22 [ 86.982681][ T8478] loop4: detected capacity change from 0 to 1024 [ 87.000915][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.012600][ T8478] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 87.036414][ T8478] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.715: Invalid block bitmap block 0 in block_group 0 [ 87.080580][ T8478] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.715: Failed to acquire dquot type 0 [ 87.095406][ T8478] EXT4-fs error (device loop4): ext4_free_blocks:6589: comm syz.4.715: Freeing blocks not in datazone - block = 0, count = 4096 [ 87.127523][ T8478] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.715: Invalid inode bitmap blk 0 in block_group 0 [ 87.159949][ T28] EXT4-fs error (device loop4): ext4_release_dquot:6961: comm kworker/u8:1: Failed to release dquot type 0 [ 87.205466][ T8478] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 87.214566][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.226337][ T8478] EXT4-fs (loop4): 1 orphan inode deleted [ 87.273321][ T8478] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.318918][ T8478] EXT4-fs error (device loop4): ext4_lookup:1813: inode #15: comm syz.4.715: iget: bad extra_isize 65535 (inode size 256) [ 87.353764][ T8542] capability: warning: `syz.3.726' uses 32-bit capabilities (legacy support in use) [ 87.383570][ T8536] hub 8-0:1.0: USB hub found [ 87.397133][ T8543] loop5: detected capacity change from 0 to 256 [ 87.399020][ T8536] hub 8-0:1.0: 8 ports detected [ 87.414200][ T8542] loop3: detected capacity change from 0 to 2048 [ 87.414289][ T8543] FAT-fs (loop5): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 87.449053][ T8547] FAULT_INJECTION: forcing a failure. [ 87.449053][ T8547] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 87.462183][ T8547] CPU: 0 UID: 0 PID: 8547 Comm: syz.0.727 Not tainted 6.13.0-rc3-syzkaller-00026-g59dbb9d81adf #0 [ 87.472789][ T8547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 87.482866][ T8547] Call Trace: [ 87.486160][ T8547] [ 87.489191][ T8547] dump_stack_lvl+0xf2/0x150 [ 87.493815][ T8547] dump_stack+0x15/0x1a [ 87.497993][ T8547] should_fail_ex+0x223/0x230 [ 87.502750][ T8547] should_fail+0xb/0x10 [ 87.506926][ T8547] should_fail_usercopy+0x1a/0x20 [ 87.511978][ T8547] _copy_from_user+0x1e/0xb0 [ 87.516602][ T8547] copy_msghdr_from_user+0x54/0x2a0 [ 87.521877][ T8547] ? __fget_files+0x17c/0x1c0 [ 87.526575][ T8547] __sys_sendmsg+0x13e/0x230 [ 87.531177][ T8547] __x64_sys_sendmsg+0x46/0x50 [ 87.535967][ T8547] x64_sys_call+0x2734/0x2dc0 [ 87.540635][ T8547] do_syscall_64+0xc9/0x1c0 [ 87.545134][ T8547] ? clear_bhb_loop+0x55/0xb0 [ 87.549802][ T8547] ? clear_bhb_loop+0x55/0xb0 [ 87.554482][ T8547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.560376][ T8547] RIP: 0033:0x7fa905435d29 [ 87.564780][ T8547] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.584427][ T8547] RSP: 002b:00007fa903aa7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 87.592830][ T8547] RAX: ffffffffffffffda RBX: 00007fa905625fa0 RCX: 00007fa905435d29 [ 87.600803][ T8547] RDX: 0000000020000084 RSI: 0000000020000240 RDI: 0000000000000003 [ 87.608803][ T8547] RBP: 00007fa903aa7090 R08: 0000000000000000 R09: 0000000000000000 [ 87.616765][ T8547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.624810][ T8547] R13: 0000000000000000 R14: 00007fa905625fa0 R15: 00007fff66acd838 [ 87.632791][ T8547] [ 87.710695][ T8554] netlink: 4 bytes leftover after parsing attributes in process `syz.5.730'. [ 87.812271][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.949177][ T8563] loop4: detected capacity change from 0 to 8192 [ 87.986157][ T8563] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿS®^F† Ö]3ó4/‡8vЩXÙåã "¡Úhù\o‘ËC:ÀÛdôQ;Œ/àwÚ*é•·­ì»ÚzÄ|Ñþ6Ý /]%:n•eF4Å°+ðÑy®ê…ˆà' [ 88.056278][ T8568] netlink: 'syz.4.734': attribute type 21 has an invalid length. [ 88.064148][ T8568] netlink: 132 bytes leftover after parsing attributes in process `syz.4.734'. [ 88.174094][ T8578] futex_wake_op: syz.1.739 tries to shift op by -1; fix this program [ 88.314041][ T8581] loop3: detected capacity change from 0 to 512 [ 88.327696][ T8581] EXT4-fs error (device loop3): ext4_ext_check_inode:524: inode #2: comm syz.3.740: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 88.356854][ T8581] EXT4-fs (loop3): get root inode failed [ 88.362655][ T8581] EXT4-fs (loop3): mount failed [ 88.377561][ T8585] FAULT_INJECTION: forcing a failure. [ 88.377561][ T8585] name failslab, interval 1, probability 0, space 0, times 0 [ 88.390247][ T8585] CPU: 1 UID: 0 PID: 8585 Comm: syz.4.741 Not tainted 6.13.0-rc3-syzkaller-00026-g59dbb9d81adf #0 [ 88.400846][ T8585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 88.410906][ T8585] Call Trace: [ 88.414177][ T8585] [ 88.417108][ T8585] dump_stack_lvl+0xf2/0x150 [ 88.421827][ T8585] dump_stack+0x15/0x1a [ 88.425995][ T8585] should_fail_ex+0x223/0x230 [ 88.430675][ T8585] should_failslab+0x8f/0xb0 [ 88.435436][ T8585] kmem_cache_alloc_node_noprof+0x59/0x320 [ 88.441251][ T8585] ? __alloc_skb+0x10b/0x310 [ 88.445847][ T8585] __alloc_skb+0x10b/0x310 [ 88.450267][ T8585] netlink_alloc_large_skb+0xad/0xe0 [ 88.455559][ T8585] netlink_sendmsg+0x3b4/0x6e0 [ 88.460415][ T8585] ? __pfx_netlink_sendmsg+0x10/0x10 [ 88.465707][ T8585] __sock_sendmsg+0x140/0x180 [ 88.470401][ T8585] ____sys_sendmsg+0x312/0x410 [ 88.475185][ T8585] __sys_sendmsg+0x19d/0x230 [ 88.479866][ T8585] __x64_sys_sendmsg+0x46/0x50 [ 88.484637][ T8585] x64_sys_call+0x2734/0x2dc0 [ 88.489336][ T8585] do_syscall_64+0xc9/0x1c0 [ 88.493862][ T8585] ? clear_bhb_loop+0x55/0xb0 [ 88.498626][ T8585] ? clear_bhb_loop+0x55/0xb0 [ 88.503295][ T8585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.509190][ T8585] RIP: 0033:0x7f31ebc65d29 [ 88.513593][ T8585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.533265][ T8585] RSP: 002b:00007f31ea2d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 88.541717][ T8585] RAX: ffffffffffffffda RBX: 00007f31ebe55fa0 RCX: 00007f31ebc65d29 [ 88.549679][ T8585] RDX: 000000000004c814 RSI: 0000000020000240 RDI: 0000000000000006 [ 88.557665][ T8585] RBP: 00007f31ea2d7090 R08: 0000000000000000 R09: 0000000000000000 [ 88.565732][ T8585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.573766][ T8585] R13: 0000000000000000 R14: 00007f31ebe55fa0 R15: 00007ffe0e43f758 [ 88.581736][ T8585] [ 88.637035][ T8588] loop4: detected capacity change from 0 to 1024 [ 88.653299][ T8588] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 88.666478][ T8593] SELinux: Context Ü is not valid (left unmapped). [ 88.671952][ T8588] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.743: Invalid block bitmap block 0 in block_group 0 [ 88.691994][ T8588] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.743: Failed to acquire dquot type 0 [ 88.705327][ T8589] loop5: detected capacity change from 0 to 8192 [ 88.712041][ T8589] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿS®^F† Ö]3ó4/‡8vЩXÙåã "¡Úhù\o‘ËC:ÀÛdôQ;Œ/àwÚ*é•·­ì»ÚzÄ|Ñþ6Ý /]%:n•eF4Å°+ðÑy®ê…ˆà' [ 88.715235][ T8588] EXT4-fs error (device loop4): ext4_free_blocks:6589: comm syz.4.743: Freeing blocks not in datazone - block = 0, count = 4096 [ 88.741479][ T8588] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.743: Invalid inode bitmap blk 0 in block_group 0 [ 88.754398][ T8588] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 88.763105][ T3803] EXT4-fs error (device loop4): ext4_release_dquot:6961: comm kworker/u8:16: Failed to release dquot type 0 [ 88.779243][ T8588] EXT4-fs (loop4): 1 orphan inode deleted [ 88.785783][ T8588] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.813658][ T8588] EXT4-fs error (device loop4): ext4_lookup:1813: inode #15: comm syz.4.743: iget: bad extra_isize 65535 (inode size 256) [ 88.933619][ T8609] loop3: detected capacity change from 0 to 512 [ 88.949745][ T8609] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 88.966592][ T8609] ext4 filesystem being mounted at /173/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.985026][ T8615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.994167][ T8609] Invalid option length (339) for dns_resolver key [ 89.001931][ T8615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.006857][ T8613] loop5: detected capacity change from 0 to 8192 [ 89.023328][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 89.055178][ T8617] loop3: detected capacity change from 0 to 512 [ 89.067571][ T8617] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.071292][ T8619] loop1: detected capacity change from 0 to 1024 [ 89.082165][ T8613] loop5: p1 p2 < > p3 p4 < p5 > [ 89.087280][ T8617] ext4 filesystem being mounted at /174/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.092132][ T8613] loop5: p1 size 108986237 extends beyond EOD, truncated [ 89.102904][ T8619] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 89.112220][ T8617] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.754: Failed to acquire dquot type 0 [ 89.122197][ T8619] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.755: Invalid block bitmap block 0 in block_group 0 [ 89.140780][ T8613] loop5: p3 size 131072 extends beyond EOD, truncated [ 89.144214][ T8619] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.755: Failed to acquire dquot type 0 [ 89.152826][ T8613] loop5: p5 size 108986237 extends beyond EOD, truncated [ 89.162662][ T8619] EXT4-fs error (device loop1): ext4_free_blocks:6589: comm syz.1.755: Freeing blocks not in datazone - block = 0, count = 4096 [ 89.182677][ T8619] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.755: Invalid inode bitmap blk 0 in block_group 0 [ 89.196228][ T3809] EXT4-fs error (device loop1): ext4_release_dquot:6961: comm kworker/u8:17: Failed to release dquot type 0 [ 89.196482][ T8619] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 89.216695][ T8619] EXT4-fs (loop1): 1 orphan inode deleted [ 89.222842][ T8619] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.250061][ T8619] netlink: 4 bytes leftover after parsing attributes in process `syz.1.755'. [ 89.260542][ T8619] EXT4-fs error (device loop1): ext4_lookup:1813: inode #15: comm syz.1.755: iget: bad extra_isize 65535 (inode size 256) [ 89.326365][ T8625] loop5: detected capacity change from 0 to 8192 [ 89.333073][ T8625] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿS®^F† Ö]3ó4/‡8vЩXÙåã "¡Úhù\o‘ËC:ÀÛdôQ;Œ/àwÚ*é•·­ì»ÚzÄ|Ñþ6Ý /]%:n•eF4Å°+ðÑy®ê…ˆà' [ 89.373362][ T8628] netlink: 'syz.5.757': attribute type 4 has an invalid length. [ 89.441796][ T8632] FAULT_INJECTION: forcing a failure. [ 89.441796][ T8632] name failslab, interval 1, probability 0, space 0, times 0 [ 89.454494][ T8632] CPU: 0 UID: 0 PID: 8632 Comm: syz.5.759 Not tainted 6.13.0-rc3-syzkaller-00026-g59dbb9d81adf #0 [ 89.465175][ T8632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 89.475345][ T8632] Call Trace: [ 89.478615][ T8632] [ 89.481532][ T8632] dump_stack_lvl+0xf2/0x150 [ 89.486229][ T8632] dump_stack+0x15/0x1a [ 89.490404][ T8632] should_fail_ex+0x223/0x230 [ 89.495132][ T8632] ? __hw_addr_add_ex+0x13d/0x360 [ 89.500210][ T8632] should_failslab+0x8f/0xb0 [ 89.504872][ T8632] __kmalloc_cache_noprof+0x4e/0x320 [ 89.510146][ T8632] __hw_addr_add_ex+0x13d/0x360 [ 89.515115][ T8632] dev_addr_init+0xb2/0x120 [ 89.519617][ T8632] alloc_netdev_mqs+0x1e1/0x9c0 [ 89.524488][ T8632] ? __pfx_tun_setup+0x10/0x10 [ 89.529244][ T8632] tun_set_iff+0x434/0x810 [ 89.533773][ T8632] __tun_chr_ioctl+0x64c/0x1860 [ 89.538705][ T8632] tun_chr_ioctl+0x27/0x30 [ 89.543138][ T8632] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 89.548278][ T8632] __se_sys_ioctl+0xc9/0x140 [ 89.553000][ T8632] __x64_sys_ioctl+0x43/0x50 [ 89.557600][ T8632] x64_sys_call+0x1690/0x2dc0 [ 89.562356][ T8632] do_syscall_64+0xc9/0x1c0 [ 89.566924][ T8632] ? clear_bhb_loop+0x55/0xb0 [ 89.571656][ T8632] ? clear_bhb_loop+0x55/0xb0 [ 89.576384][ T8632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.582268][ T8632] RIP: 0033:0x7f3114cb5d29 [ 89.586741][ T8632] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.606369][ T8632] RSP: 002b:00007f3113321038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 89.614785][ T8632] RAX: ffffffffffffffda RBX: 00007f3114ea5fa0 RCX: 00007f3114cb5d29 [ 89.622826][ T8632] RDX: 0000000020000100 RSI: 00000000400454ca RDI: 0000000000000004 [ 89.630802][ T8632] RBP: 00007f3113321090 R08: 0000000000000000 R09: 0000000000000000 [ 89.638767][ T8632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.646728][ T8632] R13: 0000000000000000 R14: 00007f3114ea5fa0 R15: 00007ffe568a76b8 [ 89.654694][ T8632] [ 89.660492][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.732519][ T8645] FAULT_INJECTION: forcing a failure. [ 89.732519][ T8645] name failslab, interval 1, probability 0, space 0, times 0 [ 89.737452][ T8646] futex_wake_op: syz.5.765 tries to shift op by -1; fix this program [ 89.745163][ T8645] CPU: 0 UID: 0 PID: 8645 Comm: syz.4.766 Not tainted 6.13.0-rc3-syzkaller-00026-g59dbb9d81adf #0 [ 89.745187][ T8645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 89.745197][ T8645] Call Trace: [ 89.745203][ T8645] [ 89.780090][ T8645] dump_stack_lvl+0xf2/0x150 [ 89.784768][ T8645] dump_stack+0x15/0x1a [ 89.784894][ T8647] Invalid option length (339) for dns_resolver key [ 89.788930][ T8645] should_fail_ex+0x223/0x230 [ 89.788957][ T8645] ? audit_log_d_path+0x96/0x250 [ 89.788981][ T8645] should_failslab+0x8f/0xb0 [ 89.809675][ T8645] __kmalloc_cache_noprof+0x4e/0x320 [ 89.815056][ T8645] audit_log_d_path+0x96/0x250 [ 89.819810][ T8645] ? __rcu_read_unlock+0x4e/0x70 [ 89.824862][ T8645] audit_log_d_path_exe+0x42/0x70 [ 89.829916][ T8645] audit_log_task+0x192/0x1c0 [ 89.834576][ T8645] audit_seccomp+0x68/0x130 [ 89.839089][ T8645] __seccomp_filter+0x6fa/0x1180 [ 89.844015][ T8645] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 89.849672][ T8645] ? vfs_write+0x596/0x920 [ 89.854082][ T8645] __secure_computing+0x9f/0x1c0 [ 89.859142][ T8645] syscall_trace_enter+0xd1/0x1f0 [ 89.864232][ T8645] ? fpregs_assert_state_consistent+0x83/0xa0 [ 89.870288][ T8645] do_syscall_64+0xaa/0x1c0 [ 89.874775][ T8645] ? clear_bhb_loop+0x55/0xb0 [ 89.879439][ T8645] ? clear_bhb_loop+0x55/0xb0 [ 89.884133][ T8645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.890033][ T8645] RIP: 0033:0x7f31ebc65d29 [ 89.894432][ T8645] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.914110][ T8645] RSP: 002b:00007f31ea2d7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ea [ 89.922510][ T8645] RAX: ffffffffffffffda RBX: 00007f31ebe55fa0 RCX: 00007f31ebc65d29 [ 89.930540][ T8645] RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000000 [ 89.938497][ T8645] RBP: 00007f31ea2d7090 R08: 0000000000000000 R09: 0000000000000000 [ 89.946571][ T8645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.954582][ T8645] R13: 0000000000000000 R14: 00007f31ebe55fa0 R15: 00007ffe0e43f758 [ 89.962638][ T8645] [ 90.043035][ T8649] loop4: detected capacity change from 0 to 8192 [ 90.064283][ T8649] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿS®^F† Ö]3ó4/‡8vЩXÙåã "¡Úhù\o‘ËC:ÀÛdôQ;Œ/àwÚ*é•·­ì»ÚzÄ|Ñþ6Ý /]%:n•eF4Å°+ðÑy®ê…ˆà' [ 90.070879][ T8654] netlink: 'syz.3.769': attribute type 4 has an invalid length. [ 90.107006][ T8656] syz.1.770 uses obsolete (PF_INET,SOCK_PACKET) [ 90.152195][ T8664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.160736][ T8664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.226042][ T8658] tap0: tun_chr_ioctl cmd 1074025676 [ 90.231383][ T8658] tap0: owner set to 0 [ 90.622824][ T8749] loop5: detected capacity change from 0 to 1024 [ 90.629820][ T8749] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 90.641403][ T8749] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.778: Invalid block bitmap block 0 in block_group 0 [ 90.655337][ T8749] __quota_error: 1668 callbacks suppressed [ 90.655350][ T8749] Quota error (device loop5): write_blk: dquota write failed [ 90.668643][ T8749] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 90.687601][ T8749] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.778: Failed to acquire dquot type 0 [ 90.712375][ T29] audit: type=1326 audit(1734476873.677:10189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8762 comm="syz.4.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31ebc65d29 code=0x7ffc0000 [ 90.712523][ T8749] EXT4-fs error (device loop5): ext4_free_blocks:6589: comm syz.5.778: Freeing blocks not in datazone - block = 0, count = 4096 [ 90.736316][ T29] audit: type=1326 audit(1734476873.707:10190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8762 comm="syz.4.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31ebc65d29 code=0x7ffc0000 [ 90.772538][ T29] audit: type=1326 audit(1734476873.717:10191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8762 comm="syz.4.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f31ebc65d29 code=0x7ffc0000 [ 90.792914][ T8749] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.778: Invalid inode bitmap blk 0 in block_group 0 [ 90.795852][ T29] audit: type=1326 audit(1734476873.717:10192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8762 comm="syz.4.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31ebc65d29 code=0x7ffc0000 [ 90.808626][ T3796] Quota error (device loop5): do_check_range: Getting block 0 out of range 1-7 [ 90.831686][ T29] audit: type=1326 audit(1734476873.717:10193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8762 comm="syz.4.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31ebc65d29 code=0x7ffc0000 [ 90.864036][ T3796] EXT4-fs error (device loop5): ext4_release_dquot:6961: comm kworker/u8:13: Failed to release dquot type 0 [ 90.876415][ T8749] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 90.893664][ T8769] FAULT_INJECTION: forcing a failure. [ 90.893664][ T8769] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 90.899864][ T8749] EXT4-fs (loop5): 1 orphan inode deleted [ 90.906769][ T8769] CPU: 0 UID: 0 PID: 8769 Comm: syz.4.780 Not tainted 6.13.0-rc3-syzkaller-00026-g59dbb9d81adf #0 [ 90.923058][ T8769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 90.933177][ T8769] Call Trace: [ 90.936460][ T8769] [ 90.939394][ T8769] dump_stack_lvl+0xf2/0x150 [ 90.940252][ T29] audit: type=1326 audit(1734476873.877:10194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8748 comm="syz.5.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3114cb5d29 code=0x7ffc0000 [ 90.943989][ T8769] dump_stack+0x15/0x1a [ 90.967360][ T29] audit: type=1326 audit(1734476873.877:10195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8748 comm="syz.5.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3114cb5d29 code=0x7ffc0000 [ 90.971452][ T8769] should_fail_ex+0x223/0x230 [ 90.971481][ T8769] should_fail+0xb/0x10 [ 91.003725][ T8769] should_fail_usercopy+0x1a/0x20 [ 91.008783][ T8769] _copy_from_user+0x1e/0xb0 [ 91.013379][ T8769] __sys_bpf+0x14e/0x7a0 [ 91.017660][ T8769] __x64_sys_bpf+0x43/0x50 [ 91.022098][ T8769] x64_sys_call+0x2914/0x2dc0 [ 91.026898][ T8769] do_syscall_64+0xc9/0x1c0 [ 91.031401][ T8769] ? clear_bhb_loop+0x55/0xb0 [ 91.036078][ T8769] ? clear_bhb_loop+0x55/0xb0 [ 91.040748][ T8769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.046727][ T8769] RIP: 0033:0x7f31ebc65d29 [ 91.051147][ T8769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.070757][ T8769] RSP: 002b:00007f31ea2d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 91.079169][ T8769] RAX: ffffffffffffffda RBX: 00007f31ebe55fa0 RCX: 00007f31ebc65d29 [ 91.087136][ T8769] RDX: 0000000000000038 RSI: 0000000020000780 RDI: 000000000000001a [ 91.095109][ T8769] RBP: 00007f31ea2d7090 R08: 0000000000000000 R09: 0000000000000000 [ 91.103070][ T8769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.111074][ T8769] R13: 0000000000000000 R14: 00007f31ebe55fa0 R15: 00007ffe0e43f758 [ 91.119050][ T8769] [ 91.140396][ T8749] netlink: 4 bytes leftover after parsing attributes in process `syz.5.778'. [ 91.167167][ T8773] netlink: 'syz.4.781': attribute type 4 has an invalid length. [ 91.175437][ T8749] EXT4-fs error (device loop5): ext4_lookup:1813: inode #15: comm syz.5.778: iget: bad extra_isize 65535 (inode size 256) [ 91.380349][ T8806] loop4: detected capacity change from 0 to 8192 [ 91.389399][ T8806] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿS®^F† Ö]3ó4/‡8vЩXÙåã "¡Úhù\o‘ËC:ÀÛdôQ;Œ/àwÚ*é•·­ì»ÚzÄ|Ñþ6Ý /]%:n•eF4Å°+ðÑy®ê…ˆà' [ 91.410802][ T8812] bond1: entered promiscuous mode [ 91.415864][ T8812] bond1: entered allmulticast mode [ 91.433758][ T8815] futex_wake_op: syz.3.788 tries to shift op by -1; fix this program [ 91.443273][ T8812] 8021q: adding VLAN 0 to HW filter on device bond1 [ 91.482406][ T8812] bond1 (unregistering): Released all slaves [ 91.586594][ T8823] Invalid option length (1252) for dns_resolver key [ 91.606292][ T8826] netlink: 'syz.1.792': attribute type 4 has an invalid length. [ 91.657815][ T8830] loop5: detected capacity change from 0 to 512 [ 91.683615][ T8830] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 91.700086][ T8830] EXT4-fs (loop5): orphan cleanup on readonly fs [ 91.714148][ T8830] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.790: bg 0: block 248: padding at end of block bitmap is not set [ 91.736256][ T8830] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.790: Failed to acquire dquot type 1 [ 91.767050][ T8830] EXT4-fs (loop5): 1 truncate cleaned up [ 91.815541][ T8833] tap0: tun_chr_ioctl cmd 1074025676 [ 91.820880][ T8833] tap0: owner set to 0 [ 92.458995][ T8894] netlink: 4 bytes leftover after parsing attributes in process `syz.3.800'. [ 92.506612][ T8891] loop4: detected capacity change from 0 to 8192 [ 92.523243][ T8891] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿS®^F† Ö]3ó4/‡8vЩXÙåã "¡Úhù\o‘ËC:ÀÛdôQ;Œ/àwÚ*é•·­ì»ÚzÄ|Ñþ6Ý /]%:n•eF4Å°+ðÑy®ê…ˆà' [ 92.552616][ T8901] loop3: detected capacity change from 0 to 1024 [ 92.656005][ T8901] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 92.717837][ T8901] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.801: Invalid block bitmap block 0 in block_group 0 [ 92.763886][ T8951] netlink: 'syz.4.804': attribute type 4 has an invalid length. [ 92.776344][ T8901] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.801: Failed to acquire dquot type 0 [ 92.814815][ T8901] EXT4-fs error (device loop3): ext4_free_blocks:6589: comm syz.3.801: Freeing blocks not in datazone - block = 0, count = 4096 [ 92.850364][ T8901] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.801: Invalid inode bitmap blk 0 in block_group 0 [ 92.866927][ T3634] EXT4-fs error (device loop3): ext4_release_dquot:6961: comm kworker/u8:9: Failed to release dquot type 0 [ 92.890499][ T8901] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 92.909383][ T8901] EXT4-fs (loop3): 1 orphan inode deleted [ 92.928417][ T8901] netlink: 4 bytes leftover after parsing attributes in process `syz.3.801'. [ 92.947935][ T8901] EXT4-fs error (device loop3): ext4_lookup:1813: inode #15: comm syz.3.801: iget: bad extra_isize 65535 (inode size 256) [ 93.402813][ T9009] Invalid option length (1252) for dns_resolver key [ 93.545386][ T9026] FAULT_INJECTION: forcing a failure. [ 93.545386][ T9026] name failslab, interval 1, probability 0, space 0, times 0 [ 93.558083][ T9026] CPU: 1 UID: 0 PID: 9026 Comm: syz.3.812 Not tainted 6.13.0-rc3-syzkaller-00026-g59dbb9d81adf #0 [ 93.568681][ T9026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 93.578791][ T9026] Call Trace: [ 93.582077][ T9026] [ 93.585009][ T9026] dump_stack_lvl+0xf2/0x150 [ 93.589638][ T9026] dump_stack+0x15/0x1a [ 93.593943][ T9026] should_fail_ex+0x223/0x230 [ 93.598629][ T9026] should_failslab+0x8f/0xb0 [ 93.603236][ T9026] kmem_cache_alloc_noprof+0x52/0x320 [ 93.608611][ T9026] ? security_inode_alloc+0x37/0x100 [ 93.613965][ T9026] security_inode_alloc+0x37/0x100 [ 93.619099][ T9026] inode_init_always_gfp+0x4a2/0x4f0 [ 93.624400][ T9026] ? __pfx_sock_alloc_inode+0x10/0x10 [ 93.629927][ T9026] alloc_inode+0x82/0x160 [ 93.634314][ T9026] new_inode_pseudo+0x15/0x20 [ 93.639167][ T9026] __sock_create+0x12b/0x5a0 [ 93.643776][ T9026] __sys_socket+0xae/0x240 [ 93.648806][ T9026] __x64_sys_socket+0x3f/0x50 [ 93.653582][ T9026] x64_sys_call+0x2cf2/0x2dc0 [ 93.658298][ T9026] do_syscall_64+0xc9/0x1c0 [ 93.662855][ T9026] ? clear_bhb_loop+0x55/0xb0 [ 93.667543][ T9026] ? clear_bhb_loop+0x55/0xb0 [ 93.672352][ T9026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.678383][ T9026] RIP: 0033:0x7f650c057c47 [ 93.682824][ T9026] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.702442][ T9026] RSP: 002b:00007f650a6c5fa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 93.710874][ T9026] RAX: ffffffffffffffda RBX: 00007f650c245fa0 RCX: 00007f650c057c47 [ 93.718879][ T9026] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 93.726921][ T9026] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 93.734923][ T9026] R10: 0000000020000040 R11: 0000000000000286 R12: 0000000000000001 [ 93.742912][ T9026] R13: 0000000000000000 R14: 00007f650c245fa0 R15: 00007ffda9be9e38 [ 93.750900][ T9026] [ 93.754362][ T9026] socket: no more sockets [ 93.821412][ T9062] loop4: detected capacity change from 0 to 1024 [ 93.854226][ T9062] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 93.877456][ T9062] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.813: Invalid block bitmap block 0 in block_group 0 [ 93.896129][ T9062] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.813: Failed to acquire dquot type 0 [ 93.906226][ T9071] loop3: detected capacity change from 0 to 1024 [ 93.927572][ T9062] EXT4-fs error (device loop4): ext4_free_blocks:6589: comm syz.4.813: Freeing blocks not in datazone - block = 0, count = 4096 [ 93.945634][ T9078] netlink: 4 bytes leftover after parsing attributes in process `syz.1.817'. [ 93.954759][ T9071] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 93.971994][ T9062] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.813: Invalid inode bitmap blk 0 in block_group 0 [ 93.984794][ T9062] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 93.996847][ T9062] EXT4-fs (loop4): 1 orphan inode deleted [ 93.996860][ T3634] EXT4-fs error (device loop4): ext4_release_dquot:6961: comm kworker/u8:9: Failed to release dquot type 0 [ 94.013831][ T9082] loop1: detected capacity change from 0 to 1024 [ 94.026228][ T9062] EXT4-fs error (device loop4): ext4_lookup:1813: inode #15: comm syz.4.813: iget: bad extra_isize 65535 (inode size 256) [ 94.039813][ T9071] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.815: Invalid block bitmap block 0 in block_group 0 [ 94.055211][ T9071] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.815: Failed to acquire dquot type 0 [ 94.068541][ T9071] EXT4-fs error (device loop3): ext4_free_blocks:6589: comm syz.3.815: Freeing blocks not in datazone - block = 0, count = 4096 [ 94.082572][ T9071] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.815: Invalid inode bitmap blk 0 in block_group 0 [ 94.117163][ T5777] EXT4-fs error (device loop3): ext4_release_dquot:6961: comm kworker/u8:25: Failed to release dquot type 0 [ 94.140326][ T9071] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 94.156416][ T9071] EXT4-fs (loop3): 1 orphan inode deleted [ 94.204587][ T9071] netlink: 4 bytes leftover after parsing attributes in process `syz.3.815'. [ 94.218314][ T9071] EXT4-fs error (device loop3): ext4_lookup:1813: inode #15: comm syz.3.815: iget: bad extra_isize 65535 (inode size 256) [ 94.479159][ T9119] loop5: detected capacity change from 0 to 1024 [ 94.725592][ T9133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.749342][ T9137] loop5: detected capacity change from 0 to 256 [ 94.756103][ T9133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.800907][ T9134] tap0: tun_chr_ioctl cmd 1074025676 [ 94.806302][ T9134] tap0: owner set to 0 [ 94.816506][ T9137] FAT-fs (loop5): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 95.099972][ T9171] loop5: detected capacity change from 0 to 1024 [ 95.138389][ T9171] EXT4-fs mount: 16 callbacks suppressed [ 95.138408][ T9171] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.321328][ T9183] loop1: detected capacity change from 0 to 1024 [ 95.329665][ T5623] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.346747][ T9183] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 95.377003][ T9189] netlink: 'syz.0.847': attribute type 4 has an invalid length. [ 95.448259][ T9196] netlink: 'syz.0.847': attribute type 4 has an invalid length. [ 95.494923][ T9183] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.845: Invalid block bitmap block 0 in block_group 0 [ 95.546863][ T9183] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.845: Failed to acquire dquot type 0 [ 95.635543][ T9229] netlink: 4 bytes leftover after parsing attributes in process `syz.0.849'. [ 95.657660][ T29] kauditd_printk_skb: 890 callbacks suppressed [ 95.657675][ T29] audit: type=1326 audit(1734476878.597:11073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9199 comm="syz.0.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa905435d29 code=0x7ffc0000 [ 95.687324][ T29] audit: type=1326 audit(1734476878.597:11074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9199 comm="syz.0.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa905435d29 code=0x7ffc0000 [ 95.713509][ T9183] EXT4-fs error (device loop1): ext4_free_blocks:6589: comm syz.1.845: Freeing blocks not in datazone - block = 0, count = 4096 [ 95.734892][ T9183] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.845: Invalid inode bitmap blk 0 in block_group 0 [ 95.753524][ T9183] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 95.753557][ T3803] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-7 [ 95.771041][ T3803] EXT4-fs error (device loop1): ext4_release_dquot:6961: comm kworker/u8:16: Failed to release dquot type 0 [ 95.782983][ T9183] EXT4-fs (loop1): 1 orphan inode deleted [ 95.789562][ T9183] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.802565][ T29] audit: type=1326 audit(1734476878.727:11075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9199 comm="syz.0.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fa905435d29 code=0x7ffc0000 [ 95.825849][ T29] audit: type=1326 audit(1734476878.727:11076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9199 comm="syz.0.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa905435d29 code=0x7ffc0000 [ 95.849478][ T29] audit: type=1326 audit(1734476878.727:11077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9199 comm="syz.0.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa905435d29 code=0x7ffc0000 [ 95.872969][ T29] audit: type=1326 audit(1734476878.737:11078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9199 comm="syz.0.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa905435d29 code=0x7ffc0000 [ 95.898607][ T29] audit: type=1326 audit(1734476878.737:11079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9199 comm="syz.0.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa905435d29 code=0x7ffc0000 [ 95.922102][ T29] audit: type=1326 audit(1734476878.737:11080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9199 comm="syz.0.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa905435d29 code=0x7ffc0000 [ 95.935748][ T9249] Invalid option length (1252) for dns_resolver key [ 95.945521][ T29] audit: type=1326 audit(1734476878.737:11081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9199 comm="syz.0.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fa905437bbc code=0x7ffc0000 [ 95.980995][ T9183] EXT4-fs error (device loop1): ext4_lookup:1813: inode #15: comm syz.1.845: iget: bad extra_isize 65535 (inode size 256) [ 96.030637][ T9260] loop5: detected capacity change from 0 to 256 [ 96.039330][ T9260] FAT-fs (loop5): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 96.080134][ T9267] loop3: detected capacity change from 0 to 1024 [ 96.097376][ T9267] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.130056][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.184242][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.222336][ T9288] loop5: detected capacity change from 0 to 1024 [ 96.232962][ T9288] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 96.256456][ T9288] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.864: Invalid block bitmap block 0 in block_group 0 [ 96.278369][ T9288] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.864: Failed to acquire dquot type 0 [ 96.301073][ T9288] EXT4-fs error (device loop5): ext4_free_blocks:6589: comm syz.5.864: Freeing blocks not in datazone - block = 0, count = 4096 [ 96.315151][ T9288] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.864: Invalid inode bitmap blk 0 in block_group 0 [ 96.327938][ T50] EXT4-fs error (device loop5): ext4_release_dquot:6961: comm kworker/u8:3: Failed to release dquot type 0 [ 96.354520][ T9288] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 96.382187][ T9288] EXT4-fs (loop5): 1 orphan inode deleted [ 96.401361][ T9288] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.439398][ T9288] netlink: 4 bytes leftover after parsing attributes in process `syz.5.864'. [ 96.454940][ T9288] EXT4-fs error (device loop5): ext4_lookup:1813: inode #15: comm syz.5.864: iget: bad extra_isize 65535 (inode size 256) [ 96.533069][ T9312] loop1: detected capacity change from 0 to 1024 [ 96.541935][ T9312] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 96.566605][ T9312] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.873: Invalid block bitmap block 0 in block_group 0 [ 96.580380][ T9312] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.873: Failed to acquire dquot type 0 [ 96.592075][ T9312] EXT4-fs error (device loop1): ext4_free_blocks:6589: comm syz.1.873: Freeing blocks not in datazone - block = 0, count = 4096 [ 96.614925][ T9321] loop3: detected capacity change from 0 to 1024 [ 96.621436][ T9312] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.873: Invalid inode bitmap blk 0 in block_group 0 [ 96.636039][ T9321] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 96.646455][ T9312] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 96.646499][ T3634] EXT4-fs error (device loop1): ext4_release_dquot:6961: comm kworker/u8:9: Failed to release dquot type 0 [ 96.666670][ T9312] EXT4-fs (loop1): 1 orphan inode deleted [ 96.668402][ T9321] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.877: Invalid block bitmap block 0 in block_group 0 [ 96.673009][ T9312] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.699152][ T9321] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.877: Failed to acquire dquot type 0 [ 96.718275][ T9321] EXT4-fs error (device loop3): ext4_free_blocks:6589: comm syz.3.877: Freeing blocks not in datazone - block = 0, count = 4096 [ 96.740961][ T9312] EXT4-fs error (device loop1): ext4_lookup:1813: inode #15: comm syz.1.873: iget: bad extra_isize 65535 (inode size 256) [ 96.753910][ T9321] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.877: Invalid inode bitmap blk 0 in block_group 0 [ 96.775935][ T50] EXT4-fs error (device loop3): ext4_release_dquot:6961: comm kworker/u8:3: Failed to release dquot type 0 [ 96.790141][ T9321] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 96.799099][ T9321] EXT4-fs (loop3): 1 orphan inode deleted [ 96.805173][ T9321] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.830226][ T9321] netlink: 4 bytes leftover after parsing attributes in process `syz.3.877'. [ 96.850226][ T9321] EXT4-fs error (device loop3): ext4_lookup:1813: inode #15: comm syz.3.877: iget: bad extra_isize 65535 (inode size 256) [ 97.060899][ T5623] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.155688][ T9344] loop5: detected capacity change from 0 to 1024 [ 97.170422][ T9344] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.237535][ T5623] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.356755][ T9361] tap0: tun_chr_ioctl cmd 1074025676 [ 97.362112][ T9361] tap0: owner set to 0 [ 97.397694][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.436309][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.501275][ T9375] netlink: 'syz.1.892': attribute type 4 has an invalid length. [ 97.511610][ T9375] netlink: 'syz.1.892': attribute type 4 has an invalid length. [ 97.588403][ T9371] tap0: tun_chr_ioctl cmd 1074025676 [ 97.593796][ T9371] tap0: owner set to 0 [ 97.883957][ T9424] loop4: detected capacity change from 0 to 1024 [ 97.897351][ T9424] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 97.909117][ T9424] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.900: Invalid block bitmap block 0 in block_group 0 [ 97.924011][ T9424] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.900: Failed to acquire dquot type 0 [ 97.935671][ T9424] EXT4-fs error (device loop4): ext4_free_blocks:6589: comm syz.4.900: Freeing blocks not in datazone - block = 0, count = 4096 [ 97.956476][ T9424] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.900: Invalid inode bitmap blk 0 in block_group 0 [ 97.970984][ T9424] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 97.980399][ T9424] EXT4-fs (loop4): 1 orphan inode deleted [ 97.986408][ T3803] EXT4-fs error (device loop4): ext4_release_dquot:6961: comm kworker/u8:16: Failed to release dquot type 0 [ 97.987741][ T9424] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.018781][ T9424] netlink: 4 bytes leftover after parsing attributes in process `syz.4.900'. [ 98.038213][ T9424] EXT4-fs error (device loop4): ext4_lookup:1813: inode #15: comm syz.4.900: iget: bad extra_isize 65535 (inode size 256) [ 98.104583][ T9450] netlink: 'syz.1.903': attribute type 4 has an invalid length. [ 98.243138][ T9450] netlink: 'syz.1.903': attribute type 4 has an invalid length. [ 98.473232][ T9546] netlink: 44 bytes leftover after parsing attributes in process `syz.1.908'. [ 98.485444][ T9542] loop3: detected capacity change from 0 to 1024 [ 98.498002][ T9542] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.550200][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.720691][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.934299][ T9589] futex_wake_op: syz.0.916 tries to shift op by -1; fix this program [ 99.028765][ T9591] tap0: tun_chr_ioctl cmd 1074025676 [ 99.034101][ T9591] tap0: owner set to 0 [ 99.195143][ T9610] loop5: detected capacity change from 0 to 2048 [ 99.584157][ T9687] netlink: 44 bytes leftover after parsing attributes in process `syz.4.921'. [ 99.600719][ T9689] loop3: detected capacity change from 0 to 1024 [ 99.649160][ T9689] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 99.697071][ T9704] loop5: detected capacity change from 0 to 1024 [ 99.727209][ T9704] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.747344][ T9689] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.920: Invalid block bitmap block 0 in block_group 0 [ 99.762232][ T9689] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.920: Failed to acquire dquot type 0 [ 99.811514][ T9689] EXT4-fs error (device loop3): ext4_free_blocks:6589: comm syz.3.920: Freeing blocks not in datazone - block = 0, count = 4096 [ 99.826506][ T9689] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.920: Invalid inode bitmap blk 0 in block_group 0 [ 99.846034][ T3634] EXT4-fs error (device loop3): ext4_release_dquot:6961: comm kworker/u8:9: Failed to release dquot type 0 [ 99.878940][ T9689] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 99.891272][ T9689] EXT4-fs (loop3): 1 orphan inode deleted [ 99.899986][ T5623] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.933461][ T9689] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.957527][ T9726] netlink: 'syz.5.925': attribute type 4 has an invalid length. [ 99.967222][ T9726] netlink: 'syz.5.925': attribute type 4 has an invalid length. [ 99.995217][ T9728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.019981][ T9689] netlink: 4 bytes leftover after parsing attributes in process `syz.3.920'. [ 100.028944][ T9728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.043169][ T9689] EXT4-fs error (device loop3): ext4_lookup:1813: inode #15: comm syz.3.920: iget: bad extra_isize 65535 (inode size 256) [ 100.082344][ T9736] netlink: 'syz.0.930': attribute type 4 has an invalid length. [ 100.102795][ T9736] netlink: 'syz.0.930': attribute type 4 has an invalid length. [ 100.177017][ T9746] futex_wake_op: syz.0.934 tries to shift op by -1; fix this program [ 100.190458][ T9744] loop5: detected capacity change from 0 to 1024 [ 100.270231][ T9744] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.306780][ T5623] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.375239][ T9754] loop5: detected capacity change from 0 to 256 [ 100.382148][ T9754] FAT-fs (loop5): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 100.418286][ T9756] loop5: detected capacity change from 0 to 1024 [ 100.425285][ T9756] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 100.448649][ T9756] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.938: Invalid block bitmap block 0 in block_group 0 [ 100.462673][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.463728][ T9756] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.938: Failed to acquire dquot type 0 [ 100.485067][ T9756] EXT4-fs error (device loop5): ext4_free_blocks:6589: comm syz.5.938: Freeing blocks not in datazone - block = 0, count = 4096 [ 100.516302][ T9756] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.938: Invalid inode bitmap blk 0 in block_group 0 [ 100.536526][ T9756] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 100.537219][ T3630] EXT4-fs error (device loop5): ext4_release_dquot:6961: comm kworker/u8:8: Failed to release dquot type 0 [ 100.556692][ T9756] EXT4-fs (loop5): 1 orphan inode deleted [ 100.562772][ T9756] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.574978][ T9761] loop3: detected capacity change from 0 to 1024 [ 100.583280][ T9761] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 100.594262][ T9761] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 100.630350][ T9761] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 100.642333][ T9765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.646171][ T9761] EXT4-fs error (device loop3): ext4_get_journal_inode:5809: comm syz.3.940: inode #1: comm syz.3.940: iget: illegal inode # [ 100.658520][ T9765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.671635][ T29] kauditd_printk_skb: 1491 callbacks suppressed [ 100.671650][ T29] audit: type=1326 audit(1734476883.627:12555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9755 comm="syz.5.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3114cb5d29 code=0x7ffc0000 [ 100.701426][ T29] audit: type=1326 audit(1734476883.627:12556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9755 comm="syz.5.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3114cb5d29 code=0x7ffc0000 [ 100.707722][ T9756] EXT4-fs error (device loop5): ext4_lookup:1813: inode #15: comm syz.5.938: iget: bad extra_isize 65535 (inode size 256) [ 100.724864][ T29] audit: type=1326 audit(1734476883.627:12557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9755 comm="syz.5.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f3114cb5d29 code=0x7ffc0000 [ 100.740061][ T9761] EXT4-fs (loop3): no journal found [ 100.766547][ T9761] EXT4-fs (loop3): can't get journal size [ 100.773175][ T29] audit: type=1326 audit(1734476883.737:12558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9755 comm="syz.5.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3114cb5d29 code=0x7ffc0000 [ 100.796662][ T29] audit: type=1326 audit(1734476883.737:12559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9755 comm="syz.5.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3114cb5d29 code=0x7ffc0000 [ 100.821939][ T9761] EXT4-fs (loop3): failed to initialize system zone (-22) [ 100.829265][ T9761] EXT4-fs (loop3): mount failed [ 100.834193][ T29] audit: type=1326 audit(1734476883.767:12560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9755 comm="syz.5.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3114cb5d29 code=0x7ffc0000 [ 100.857789][ T29] audit: type=1326 audit(1734476883.787:12561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9755 comm="syz.5.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3114cb5d29 code=0x7ffc0000 [ 100.884423][ T29] audit: type=1326 audit(1734476883.837:12562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9755 comm="syz.5.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3114cb5d29 code=0x7ffc0000 [ 100.907886][ T29] audit: type=1326 audit(1734476883.837:12563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9755 comm="syz.5.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3114cb5d29 code=0x7ffc0000 [ 100.931434][ T29] audit: type=1326 audit(1734476883.837:12564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9755 comm="syz.5.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f3114cb7bbc code=0x7ffc0000 [ 101.004421][ T9773] Invalid option length (1252) for dns_resolver key [ 101.057896][ T9775] FAULT_INJECTION: forcing a failure. [ 101.057896][ T9775] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 101.071040][ T9775] CPU: 0 UID: 0 PID: 9775 Comm: syz.0.945 Not tainted 6.13.0-rc3-syzkaller-00026-g59dbb9d81adf #0 [ 101.081698][ T9775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 101.091750][ T9775] Call Trace: [ 101.095028][ T9775] [ 101.098067][ T9775] dump_stack_lvl+0xf2/0x150 [ 101.102678][ T9775] dump_stack+0x15/0x1a [ 101.106841][ T9775] should_fail_ex+0x223/0x230 [ 101.111564][ T9775] should_fail+0xb/0x10 [ 101.115741][ T9775] should_fail_usercopy+0x1a/0x20 [ 101.120773][ T9775] _copy_from_iter+0xd5/0xd00 [ 101.125497][ T9775] ? avc_has_perm+0xd4/0x160 [ 101.130101][ T9775] ? selinux_socket_sendmsg+0x185/0x1c0 [ 101.135664][ T9775] bcm_sendmsg+0xca/0x470 [ 101.140102][ T9775] ? __pfx_bcm_sendmsg+0x10/0x10 [ 101.145110][ T9775] __sock_sendmsg+0x140/0x180 [ 101.149817][ T9775] ____sys_sendmsg+0x312/0x410 [ 101.154599][ T9775] __sys_sendmsg+0x19d/0x230 [ 101.159206][ T9775] __x64_sys_sendmsg+0x46/0x50 [ 101.163981][ T9775] x64_sys_call+0x2734/0x2dc0 [ 101.168677][ T9775] do_syscall_64+0xc9/0x1c0 [ 101.173274][ T9775] ? clear_bhb_loop+0x55/0xb0 [ 101.177963][ T9775] ? clear_bhb_loop+0x55/0xb0 [ 101.182645][ T9775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.188583][ T9775] RIP: 0033:0x7fa905435d29 [ 101.192994][ T9775] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.212617][ T9775] RSP: 002b:00007fa903aa7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 101.221076][ T9775] RAX: ffffffffffffffda RBX: 00007fa905625fa0 RCX: 00007fa905435d29 [ 101.229071][ T9775] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 101.237070][ T9775] RBP: 00007fa903aa7090 R08: 0000000000000000 R09: 0000000000000000 [ 101.245081][ T9775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.253085][ T9775] R13: 0000000000000000 R14: 00007fa905625fa0 R15: 00007fff66acd838 [ 101.261094][ T9775] [ 101.286579][ T5623] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.342087][ T9780] netlink: 4 bytes leftover after parsing attributes in process `syz.0.948'. [ 101.628041][ T9788] loop4: detected capacity change from 0 to 1024 [ 101.649537][ T9788] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 101.682882][ T9788] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.949: Invalid block bitmap block 0 in block_group 0 [ 101.739692][ T9788] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.949: Failed to acquire dquot type 0 [ 101.761290][ T9788] EXT4-fs error (device loop4): ext4_free_blocks:6589: comm syz.4.949: Freeing blocks not in datazone - block = 0, count = 4096 [ 101.793852][ T9788] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.949: Invalid inode bitmap blk 0 in block_group 0 [ 101.834705][ T40] EXT4-fs error (device loop4): ext4_release_dquot:6961: comm kworker/u8:2: Failed to release dquot type 0 [ 101.859533][ T9792] loop3: detected capacity change from 0 to 1024 [ 101.864256][ T9788] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 101.888638][ T9788] EXT4-fs (loop4): 1 orphan inode deleted [ 101.900501][ T9792] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.913553][ T9788] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.962655][ T9788] EXT4-fs error (device loop4): ext4_lookup:1813: inode #15: comm syz.4.949: iget: bad extra_isize 65535 (inode size 256) [ 101.979110][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.041122][ T9800] loop3: detected capacity change from 0 to 256 [ 102.049296][ T9800] FAT-fs (loop3): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 102.117247][ T9807] loop3: detected capacity change from 0 to 1024 [ 102.124218][ T9807] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 102.146796][ T9807] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.955: Invalid block bitmap block 0 in block_group 0 [ 102.160868][ T9807] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.955: Failed to acquire dquot type 0 [ 102.172830][ T9807] EXT4-fs error (device loop3): ext4_free_blocks:6589: comm syz.3.955: Freeing blocks not in datazone - block = 0, count = 4096 [ 102.189085][ T9807] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.955: Invalid inode bitmap blk 0 in block_group 0 [ 102.211566][ T3634] EXT4-fs error (device loop3): ext4_release_dquot:6961: comm kworker/u8:9: Failed to release dquot type 0 [ 102.224472][ T9807] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 102.233300][ T9807] EXT4-fs (loop3): 1 orphan inode deleted [ 102.240183][ T9807] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.256646][ T9807] netlink: 4 bytes leftover after parsing attributes in process `syz.3.955'. [ 102.272139][ T9807] EXT4-fs error (device loop3): ext4_lookup:1813: inode #15: comm syz.3.955: iget: bad extra_isize 65535 (inode size 256) [ 102.291898][ T9811] futex_wake_op: syz.0.956 tries to shift op by -1; fix this program [ 102.453437][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.526977][ T9816] Invalid option length (1252) for dns_resolver key [ 102.578423][ T9820] netlink: 8 bytes leftover after parsing attributes in process `syz.1.960'. [ 102.719888][ T9826] loop1: detected capacity change from 0 to 512 [ 102.727304][ T9826] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 102.739631][ T9826] EXT4-fs (loop1): orphan cleanup on readonly fs [ 102.746875][ T9826] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.962: bg 0: block 248: padding at end of block bitmap is not set [ 102.762905][ T9826] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.962: Failed to acquire dquot type 1 [ 102.775355][ T9826] EXT4-fs (loop1): 1 truncate cleaned up [ 102.783016][ T9826] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 102.971383][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.192986][ T9845] Driver unsupported XDP return value 0 on prog (id 703) dev N/A, expect packet loss! [ 103.353215][ T9861] vlan2: entered allmulticast mode [ 103.559829][ T9882] vlan2: entered allmulticast mode [ 104.076031][ T9945] netlink: 'syz.4.975': attribute type 4 has an invalid length. [ 104.139636][ T9945] netlink: 'syz.4.975': attribute type 4 has an invalid length. [ 104.343747][ T9956] tap0: tun_chr_ioctl cmd 1074025676 [ 104.349114][ T9956] tap0: owner set to 0 [ 104.568066][T10029] FAULT_INJECTION: forcing a failure. [ 104.568066][T10029] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.581276][T10029] CPU: 1 UID: 0 PID: 10029 Comm: syz.0.980 Not tainted 6.13.0-rc3-syzkaller-00026-g59dbb9d81adf #0 [ 104.591971][T10029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 104.602113][T10029] Call Trace: [ 104.605403][T10029] [ 104.608339][T10029] dump_stack_lvl+0xf2/0x150 [ 104.612978][T10029] dump_stack+0x15/0x1a [ 104.617211][T10029] should_fail_ex+0x223/0x230 [ 104.622009][T10029] should_fail+0xb/0x10 [ 104.626174][T10029] should_fail_usercopy+0x1a/0x20 [ 104.631207][T10029] _copy_from_user+0x1e/0xb0 [ 104.635825][T10029] __sys_bpf+0x14e/0x7a0 [ 104.640137][T10029] __x64_sys_bpf+0x43/0x50 [ 104.644587][T10029] x64_sys_call+0x2914/0x2dc0 [ 104.649283][T10029] do_syscall_64+0xc9/0x1c0 [ 104.653795][T10029] ? clear_bhb_loop+0x55/0xb0 [ 104.658475][T10029] ? clear_bhb_loop+0x55/0xb0 [ 104.663203][T10029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.669155][T10029] RIP: 0033:0x7fa905435d29 [ 104.673586][T10029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.693216][T10029] RSP: 002b:00007fa903aa7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 104.701702][T10029] RAX: ffffffffffffffda RBX: 00007fa905625fa0 RCX: 00007fa905435d29 [ 104.709701][T10029] RDX: 0000000000000048 RSI: 0000000020000840 RDI: 0000000000000000 [ 104.717668][T10029] RBP: 00007fa903aa7090 R08: 0000000000000000 R09: 0000000000000000 [ 104.725640][T10029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.733611][T10029] R13: 0000000000000000 R14: 00007fa905625fa0 R15: 00007fff66acd838 [ 104.741595][T10029] [ 104.758790][T10032] loop3: detected capacity change from 0 to 1024 [ 104.774612][T10032] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 104.830189][T10032] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.974: Invalid block bitmap block 0 in block_group 0 [ 104.848166][T10032] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.974: Failed to acquire dquot type 0 [ 104.871843][T10032] EXT4-fs error (device loop3): ext4_free_blocks:6589: comm syz.3.974: Freeing blocks not in datazone - block = 0, count = 4096 [ 104.903335][T10032] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.974: Invalid inode bitmap blk 0 in block_group 0 [ 104.926118][ T3803] EXT4-fs error (device loop3): ext4_release_dquot:6961: comm kworker/u8:16: Failed to release dquot type 0 [ 104.959958][T10032] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 104.978495][T10032] EXT4-fs (loop3): 1 orphan inode deleted [ 105.000656][T10032] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.156684][T10099] netlink: 12 bytes leftover after parsing attributes in process `syz.5.985'. [ 105.168250][T10101] loop4: detected capacity change from 0 to 1024 [ 105.179061][T10032] netlink: 4 bytes leftover after parsing attributes in process `syz.3.974'. [ 105.180663][T10099] loop5: detected capacity change from 0 to 1024 [ 105.194673][T10032] EXT4-fs error (device loop3): ext4_lookup:1813: inode #15: comm syz.3.974: iget: bad extra_isize 65535 (inode size 256) [ 105.195275][T10099] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 105.225699][T10101] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.254802][T10099] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.985: Invalid block bitmap block 0 in block_group 0 [ 105.279068][T10099] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.985: Failed to acquire dquot type 0 [ 105.311715][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.316172][T10099] EXT4-fs error (device loop5): ext4_free_blocks:6589: comm syz.5.985: Freeing blocks not in datazone - block = 0, count = 4096 [ 105.334243][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.341955][T10099] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.985: Invalid inode bitmap blk 0 in block_group 0 [ 105.355873][ T3816] EXT4-fs error (device loop5): ext4_release_dquot:6961: comm kworker/u8:18: Failed to release dquot type 0 [ 105.368006][T10099] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 105.377199][T10099] EXT4-fs (loop5): 1 orphan inode deleted [ 105.383595][T10099] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.387202][T10122] netlink: 'syz.1.988': attribute type 4 has an invalid length. [ 105.407999][T10099] EXT4-fs error (device loop5): ext4_lookup:1813: inode #15: comm syz.5.985: iget: bad extra_isize 65535 (inode size 256) [ 105.426195][T10125] vlan2: entered allmulticast mode [ 105.433415][T10122] netlink: 'syz.1.988': attribute type 4 has an invalid length. [ 105.507457][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.564330][T10155] tap0: tun_chr_ioctl cmd 1074025676 [ 105.569737][T10155] tap0: owner set to 0 [ 105.620812][T10164] netlink: 'syz.4.997': attribute type 4 has an invalid length. [ 105.635209][T10164] netlink: 'syz.4.997': attribute type 4 has an invalid length. [ 105.678490][ T29] kauditd_printk_skb: 1045 callbacks suppressed [ 105.678505][ T29] audit: type=1326 audit(1734476888.647:13596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10080 comm="syz.5.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3114cacce7 code=0x7ffc0000 [ 105.687761][T10176] loop4: detected capacity change from 0 to 1024 [ 105.715622][ T29] audit: type=1326 audit(1734476888.647:13597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10080 comm="syz.5.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3114c51f29 code=0x7ffc0000 [ 105.739155][ T29] audit: type=1326 audit(1734476888.647:13598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10080 comm="syz.5.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f3114cb5d29 code=0x7ffc0000 [ 105.762731][ T29] audit: type=1326 audit(1734476888.677:13599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10080 comm="syz.5.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3114cacce7 code=0x7ffc0000 [ 105.786253][ T29] audit: type=1326 audit(1734476888.677:13600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10080 comm="syz.5.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3114c51f29 code=0x7ffc0000 [ 105.809763][ T29] audit: type=1326 audit(1734476888.677:13601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10080 comm="syz.5.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f3114cb5d29 code=0x7ffc0000 [ 105.853004][T10199] loop3: detected capacity change from 0 to 512 [ 105.863596][T10176] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.918638][T10199] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 105.931524][ T29] audit: type=1326 audit(1734476888.757:13602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10080 comm="syz.5.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3114cacce7 code=0x7ffc0000 [ 105.955044][ T29] audit: type=1326 audit(1734476888.757:13603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10080 comm="syz.5.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3114c51f29 code=0x7ffc0000 [ 105.978458][ T29] audit: type=1326 audit(1734476888.757:13604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10080 comm="syz.5.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f3114cb5d29 code=0x7ffc0000 [ 106.001968][ T29] audit: type=1326 audit(1734476888.757:13605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10080 comm="syz.5.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3114cacce7 code=0x7ffc0000 [ 106.029956][T10234] netlink: 'syz.0.1000': attribute type 4 has an invalid length. [ 106.042105][ T5623] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.059758][T10234] netlink: 'syz.0.1000': attribute type 4 has an invalid length. [ 106.060106][T10199] EXT4-fs (loop3): orphan cleanup on readonly fs [ 106.075059][T10199] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.998: bg 0: block 248: padding at end of block bitmap is not set [ 106.095588][T10199] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.998: Failed to acquire dquot type 1 [ 106.122718][T10238] vlan2: entered allmulticast mode [ 106.128384][T10199] EXT4-fs (loop3): 1 truncate cleaned up [ 106.168569][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.195040][T10199] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 106.199261][T10243] loop5: detected capacity change from 0 to 1024 [ 106.253322][T10243] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 106.281381][T10243] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.1002: Invalid block bitmap block 0 in block_group 0 [ 106.298035][T10243] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.1002: Failed to acquire dquot type 0 [ 106.318111][T10243] EXT4-fs error (device loop5): ext4_free_blocks:6589: comm syz.5.1002: Freeing blocks not in datazone - block = 0, count = 4096 [ 106.337377][T10243] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.1002: Invalid inode bitmap blk 0 in block_group 0 [ 106.357374][T10243] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 106.363109][T10263] tap0: tun_chr_ioctl cmd 1074025676 [ 106.371212][T10263] tap0: owner set to 0 [ 106.376360][T10243] EXT4-fs (loop5): 1 orphan inode deleted [ 106.384286][ T5777] EXT4-fs error (device loop5): ext4_release_dquot:6961: comm kworker/u8:25: Failed to release dquot type 0 [ 106.400227][T10243] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.422311][T10243] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1002'. [ 106.437389][T10243] EXT4-fs error (device loop5): ext4_lookup:1813: inode #15: comm syz.5.1002: iget: bad extra_isize 65535 (inode size 256) [ 106.477062][T10278] tap0: tun_chr_ioctl cmd 1074025676 [ 106.482422][T10278] tap0: owner set to 0 [ 107.022280][ T5623] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.237388][T10391] loop4: detected capacity change from 0 to 1024 [ 107.307463][T10391] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.321361][T10398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.340104][T10398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.482653][T10400] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 107.619152][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.713590][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.722850][T10420] netlink: 'syz.1.1018': attribute type 4 has an invalid length. [ 107.741219][T10420] netlink: 'syz.1.1018': attribute type 4 has an invalid length. [ 107.821374][T10443] loop3: detected capacity change from 0 to 1024 [ 107.838071][T10443] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 107.850822][T10443] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.1023: Invalid block bitmap block 0 in block_group 0 [ 107.861989][T10445] SELinux: failed to load policy [ 107.864823][T10443] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.1023: Failed to acquire dquot type 0 [ 107.876248][T10445] vlan2: entered allmulticast mode [ 107.890704][T10443] EXT4-fs error (device loop3): ext4_free_blocks:6589: comm syz.3.1023: Freeing blocks not in datazone - block = 0, count = 4096 [ 107.906014][T10443] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.1023: Invalid inode bitmap blk 0 in block_group 0 [ 107.920323][ T5554] EXT4-fs error (device loop3): ext4_release_dquot:6961: comm kworker/u8:22: Failed to release dquot type 0 [ 107.932000][T10443] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 107.941015][T10443] EXT4-fs (loop3): 1 orphan inode deleted [ 107.947755][T10443] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.978491][T10443] EXT4-fs error (device loop3): ext4_lookup:1813: inode #15: comm syz.3.1023: iget: bad extra_isize 65535 (inode size 256) [ 108.132512][T10458] vlan2: entered allmulticast mode [ 108.213400][T10473] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1036'. [ 108.654241][T10502] vlan2: entered allmulticast mode [ 108.671432][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.690465][ T3378] lo speed is unknown, defaulting to 1000 [ 108.731692][T10506] loop3: detected capacity change from 0 to 1024 [ 108.738716][T10506] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 108.749730][T10506] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 108.761118][T10506] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 108.771536][T10506] EXT4-fs error (device loop3): ext4_get_journal_inode:5809: comm syz.3.1051: inode #1: comm syz.3.1051: iget: illegal inode # [ 108.785303][T10506] EXT4-fs (loop3): no journal found [ 108.790609][T10506] EXT4-fs (loop3): can't get journal size [ 108.797358][T10506] EXT4-fs (loop3): failed to initialize system zone (-22) [ 108.804743][T10506] EXT4-fs (loop3): mount failed [ 108.879741][ T3348] lo speed is unknown, defaulting to 1000 [ 108.899741][ T3378] lo speed is unknown, defaulting to 1000 [ 108.972115][T10548] loop5: detected capacity change from 0 to 1024 [ 108.985140][T10548] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 109.012762][T10559] loop3: detected capacity change from 0 to 128 [ 109.022304][T10548] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.1059: Invalid block bitmap block 0 in block_group 0 [ 109.053279][T10548] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.1059: Failed to acquire dquot type 0 [ 109.069429][T10563] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1063'. [ 109.082896][T10548] EXT4-fs error (device loop5): ext4_free_blocks:6589: comm syz.5.1059: Freeing blocks not in datazone - block = 0, count = 4096 [ 109.095742][T10559] syz.3.1062: attempt to access beyond end of device [ 109.095742][T10559] loop3: rw=0, sector=121, nr_sectors = 920 limit=128 [ 109.105326][T10548] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.1059: Invalid inode bitmap blk 0 in block_group 0 [ 109.126583][T10548] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 109.127225][T10559] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1062'. [ 109.135151][ T3634] EXT4-fs error (device loop5): ext4_release_dquot:6961: comm kworker/u8:9: Failed to release dquot type 0 [ 109.156392][T10548] EXT4-fs (loop5): 1 orphan inode deleted [ 109.162734][T10548] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.192419][T10571] Invalid option length (1048127) for dns_resolver key [ 109.217304][T10548] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1059'. [ 109.227292][T10548] EXT4-fs error (device loop5): ext4_lookup:1813: inode #15: comm syz.5.1059: iget: bad extra_isize 65535 (inode size 256) [ 109.371587][T10594] loop3: detected capacity change from 0 to 256 [ 109.379231][T10594] FAT-fs (loop3): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 109.461193][T10610] IPVS: set_ctl: invalid protocol: 0 172.30.1.4:20003 [ 109.810242][ T5623] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.839870][T10671] validate_nla: 10 callbacks suppressed [ 109.839886][T10671] netlink: 'syz.5.1069': attribute type 4 has an invalid length. [ 109.855431][T10671] netlink: 'syz.5.1069': attribute type 4 has an invalid length. [ 110.028264][T10684] netlink: 'syz.0.1074': attribute type 4 has an invalid length. [ 110.056583][T10677] tap0: tun_chr_ioctl cmd 1074025676 [ 110.061964][T10677] tap0: owner set to 0 [ 110.076708][T10695] tap0: tun_chr_ioctl cmd 1074025676 [ 110.082066][T10695] tap0: owner set to 0 [ 110.509270][T10776] vlan2: entered allmulticast mode [ 110.797100][ T29] kauditd_printk_skb: 1166 callbacks suppressed [ 110.797114][ T29] audit: type=1326 audit(1734476893.767:14761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10790 comm="syz.4.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31ebc65d29 code=0x7ffc0000 [ 110.827077][ T29] audit: type=1326 audit(1734476893.767:14762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10790 comm="syz.4.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31ebc65d29 code=0x7ffc0000 [ 110.873858][T10839] netlink: 'syz.4.1080': attribute type 4 has an invalid length. [ 110.884547][T10839] netlink: 'syz.4.1080': attribute type 4 has an invalid length. [ 110.922295][ T29] audit: type=1400 audit(1734476893.887:14763): avc: denied { ioctl } for pid=10844 comm="syz.4.1083" path="socket:[14461]" dev="sockfs" ino=14461 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 110.959522][T10847] Invalid option length (1048127) for dns_resolver key [ 110.973645][ T29] audit: type=1326 audit(1734476893.887:14764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10840 comm="syz.5.1081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3114cb5d29 code=0x7ffc0000 [ 110.997385][ T29] audit: type=1326 audit(1734476893.887:14765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10840 comm="syz.5.1081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3114cb5d29 code=0x7ffc0000 [ 111.018911][T10851] netlink: 'syz.1.1085': attribute type 4 has an invalid length. [ 111.021052][ T29] audit: type=1326 audit(1734476893.887:14766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10840 comm="syz.5.1081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f3114cb5d29 code=0x7ffc0000 [ 111.052312][ T29] audit: type=1326 audit(1734476893.887:14767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10840 comm="syz.5.1081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3114cb5d29 code=0x7ffc0000 [ 111.076119][ T29] audit: type=1326 audit(1734476893.937:14768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10840 comm="syz.5.1081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3114cb5d29 code=0x7ffc0000 [ 111.099706][ T29] audit: type=1326 audit(1734476893.937:14769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10840 comm="syz.5.1081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3114cb5d29 code=0x7ffc0000 [ 111.123285][ T29] audit: type=1326 audit(1734476893.937:14770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10840 comm="syz.5.1081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3114cb5d29 code=0x7ffc0000 [ 111.848364][T10953] loop5: detected capacity change from 0 to 1024 [ 111.867023][T10953] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 111.892215][T10953] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.1092: Invalid block bitmap block 0 in block_group 0 [ 111.920940][T10953] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.1092: Failed to acquire dquot type 0 [ 111.948235][T10953] EXT4-fs error (device loop5): ext4_free_blocks:6589: comm syz.5.1092: Freeing blocks not in datazone - block = 0, count = 4096 [ 111.976146][T10953] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.1092: Invalid inode bitmap blk 0 in block_group 0 [ 111.996059][ T5777] EXT4-fs error (device loop5): ext4_release_dquot:6961: comm kworker/u8:25: Failed to release dquot type 0 [ 112.018370][T10953] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 112.036276][T10953] EXT4-fs (loop5): 1 orphan inode deleted [ 112.083951][T10953] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.150026][T10953] EXT4-fs error (device loop5): ext4_lookup:1813: inode #15: comm syz.5.1092: iget: bad extra_isize 65535 (inode size 256) [ 112.192074][T11008] Invalid option length (1048127) for dns_resolver key [ 112.318122][T11026] Invalid option length (1048127) for dns_resolver key [ 112.369988][T11036] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1102'. [ 112.402408][T11040] netlink: 'syz.1.1104': attribute type 4 has an invalid length. [ 112.455563][T11044] loop3: detected capacity change from 0 to 1024 [ 112.462681][T11044] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 112.473607][T11044] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 112.483661][T11044] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 112.493810][T11044] EXT4-fs error (device loop3): ext4_get_journal_inode:5809: comm syz.3.1107: inode #1: comm syz.3.1107: iget: illegal inode # [ 112.507163][T11044] EXT4-fs (loop3): no journal found [ 112.512391][T11044] EXT4-fs (loop3): can't get journal size [ 112.519485][T11044] EXT4-fs (loop3): failed to initialize system zone (-22) [ 112.527779][T11044] EXT4-fs (loop3): mount failed [ 112.643363][T11076] tap0: tun_chr_ioctl cmd 1074025676 [ 112.648781][T11076] tap0: owner set to 0 [ 112.702825][T11082] Invalid option length (1048127) for dns_resolver key [ 112.720462][ T5623] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.943654][T11123] netlink: 'syz.4.1116': attribute type 4 has an invalid length. [ 113.072785][T11138] vlan2: entered allmulticast mode [ 113.074765][T11132] loop4: detected capacity change from 0 to 1024 [ 113.087334][T11132] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 113.098357][T11132] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 113.108244][T11132] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 113.118491][T11132] EXT4-fs error (device loop4): ext4_get_journal_inode:5809: comm syz.4.1118: inode #1: comm syz.4.1118: iget: illegal inode # [ 113.132041][T11132] EXT4-fs (loop4): no journal found [ 113.137314][T11132] EXT4-fs (loop4): can't get journal size [ 113.146045][T11132] EXT4-fs (loop4): failed to initialize system zone (-22) [ 113.153339][T11132] EXT4-fs (loop4): mount failed [ 113.219125][T11158] vlan2: entered allmulticast mode [ 113.279003][T11165] Invalid option length (1048127) for dns_resolver key [ 113.382533][T11194] loop4: detected capacity change from 0 to 512 [ 113.418519][T11194] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 113.429039][T11205] netlink: 'syz.0.1127': attribute type 4 has an invalid length. [ 113.449296][T11194] ext4 filesystem being mounted at /211/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.491697][T11217] loop1: detected capacity change from 0 to 1024 [ 113.513460][T11219] vlan2: entered allmulticast mode [ 113.540338][T11217] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.579356][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.591806][T11225] Invalid option length (339) for dns_resolver key [ 113.704833][T11232] Invalid option length (1048127) for dns_resolver key [ 113.910131][T11263] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1140'. [ 114.026936][T11278] netlink: 'syz.5.1141': attribute type 4 has an invalid length. [ 114.189184][T11301] loop5: detected capacity change from 0 to 1024 [ 114.225627][T11301] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.231903][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 114.312194][ T5623] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.352247][T11322] vlan2: entered allmulticast mode [ 114.689822][T11381] loop3: detected capacity change from 0 to 512 [ 114.705085][T11381] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 114.726168][T11381] EXT4-fs (loop3): orphan cleanup on readonly fs [ 114.753097][T11381] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1149: bg 0: block 248: padding at end of block bitmap is not set [ 114.776192][T11381] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.1149: Failed to acquire dquot type 1 [ 114.815800][T11381] EXT4-fs (loop3): 1 truncate cleaned up [ 114.838253][T11381] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 114.868231][T11393] loop1: detected capacity change from 0 to 1024 [ 114.898019][T11393] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.913485][T11391] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1156'. [ 114.961797][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.110821][T11404] vlan2: entered allmulticast mode [ 115.270244][T11410] loop5: detected capacity change from 0 to 1024 [ 115.292341][T11412] FAULT_INJECTION: forcing a failure. [ 115.292341][T11412] name failslab, interval 1, probability 0, space 0, times 0 [ 115.305057][T11412] CPU: 1 UID: 0 PID: 11412 Comm: syz.1.1163 Not tainted 6.13.0-rc3-syzkaller-00026-g59dbb9d81adf #0 [ 115.315915][T11412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 115.325973][T11412] Call Trace: [ 115.329247][T11412] [ 115.332213][T11412] dump_stack_lvl+0xf2/0x150 [ 115.336868][T11412] dump_stack+0x15/0x1a [ 115.341042][T11412] should_fail_ex+0x223/0x230 [ 115.345725][T11412] ? statistic_mt_check+0x88/0xe0 [ 115.350779][T11412] should_failslab+0x8f/0xb0 [ 115.355390][T11412] __kmalloc_cache_noprof+0x4e/0x320 [ 115.360688][T11412] statistic_mt_check+0x88/0xe0 [ 115.365628][T11412] xt_check_match+0x259/0x4b0 [ 115.370449][T11412] ? strnlen+0x28/0x50 [ 115.374579][T11412] ? xt_find_match+0x1c1/0x1e0 [ 115.379359][T11412] ? xt_find_match+0x1a2/0x1e0 [ 115.384318][T11412] translate_table+0xb44/0x1040 [ 115.389195][T11412] ? _copy_from_user+0x8d/0xb0 [ 115.393992][T11412] do_ip6t_set_ctl+0x7cc/0x8c0 [ 115.398767][T11412] ? kstrtouint+0x77/0xc0 [ 115.403151][T11412] nf_setsockopt+0x195/0x1b0 [ 115.408210][T11412] ipv6_setsockopt+0x10f/0x130 [ 115.413087][T11412] tcp_setsockopt+0x93/0xb0 [ 115.417660][T11412] sock_common_setsockopt+0x64/0x80 [ 115.422860][T11412] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 115.428805][T11412] __sys_setsockopt+0x187/0x200 [ 115.433672][T11412] __x64_sys_setsockopt+0x66/0x80 [ 115.438703][T11412] x64_sys_call+0x282e/0x2dc0 [ 115.443384][T11412] do_syscall_64+0xc9/0x1c0 [ 115.447984][T11412] ? clear_bhb_loop+0x55/0xb0 [ 115.449646][T11410] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 115.452653][T11412] ? clear_bhb_loop+0x55/0xb0 [ 115.452678][T11412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.463563][T11410] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 115.468153][T11412] RIP: 0033:0x7fd0751c5d29 [ 115.468172][T11412] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.468189][T11412] RSP: 002b:00007fd073837038 EFLAGS: 00000246 [ 115.484205][T11410] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 115.487962][T11412] ORIG_RAX: 0000000000000036 [ 115.487971][T11412] RAX: ffffffffffffffda RBX: 00007fd0753b5fa0 RCX: 00007fd0751c5d29 [ 115.487984][T11412] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 115.487996][T11412] RBP: 00007fd073837090 R08: 0000000000000468 R09: 0000000000000000 [ 115.488052][T11412] R10: 0000000020000740 R11: 0000000000000246 R12: 0000000000000001 [ 115.488063][T11412] R13: 0000000000000000 R14: 00007fd0753b5fa0 R15: 00007ffddb25c828 [ 115.518013][T11410] EXT4-fs error (device loop5): ext4_get_journal_inode:5809: comm syz.5.1161: inode #1: comm syz.5.1161: iget: illegal inode # [ 115.523766][T11412] [ 115.538341][T11410] EXT4-fs (loop5): no journal found [ 115.589974][T11410] EXT4-fs (loop5): can't get journal size [ 115.590388][T11415] loop4: detected capacity change from 0 to 1024 [ 115.606021][T11410] EXT4-fs (loop5): failed to initialize system zone (-22) [ 115.613160][T11410] EXT4-fs (loop5): mount failed [ 115.617267][T11415] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 115.632710][T11415] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.1164: Invalid block bitmap block 0 in block_group 0 [ 115.659624][T11415] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.1164: Failed to acquire dquot type 0 [ 115.691770][T11415] EXT4-fs error (device loop4): ext4_free_blocks:6589: comm syz.4.1164: Freeing blocks not in datazone - block = 0, count = 4096 [ 115.720845][T11415] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.1164: Invalid inode bitmap blk 0 in block_group 0 [ 115.733896][T11415] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 115.758791][T11415] EXT4-fs (loop4): 1 orphan inode deleted [ 115.765026][T11415] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.792659][T11415] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1164'. [ 115.830497][ T29] kauditd_printk_skb: 1348 callbacks suppressed [ 115.830512][ T29] audit: type=1326 audit(1734476898.797:16112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11414 comm="syz.4.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31ebc65d29 code=0x7ffc0000 [ 115.862489][T11415] EXT4-fs error (device loop4): ext4_lookup:1813: inode #15: comm syz.4.1164: iget: bad extra_isize 65535 (inode size 256) [ 115.877909][ T50] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-7 [ 115.886929][ T50] EXT4-fs error (device loop4): ext4_release_dquot:6961: comm kworker/u8:3: Failed to release dquot type 0 [ 115.904206][T11433] tap0: tun_chr_ioctl cmd 1074025676 [ 115.909666][T11433] tap0: owner set to 0 [ 115.921562][ T29] audit: type=1326 audit(1734476898.827:16113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11414 comm="syz.4.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31ebc65d29 code=0x7ffc0000 [ 115.945307][ T29] audit: type=1326 audit(1734476898.827:16114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11414 comm="syz.4.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f31ebc65d29 code=0x7ffc0000 [ 115.968724][ T29] audit: type=1326 audit(1734476898.887:16115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11414 comm="syz.4.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31ebc65d29 code=0x7ffc0000 [ 115.992341][ T29] audit: type=1326 audit(1734476898.887:16116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11414 comm="syz.4.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f31ebc67bbc code=0x7ffc0000 [ 116.015822][ T29] audit: type=1326 audit(1734476898.887:16117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11414 comm="syz.4.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f31ebc67af4 code=0x7ffc0000 [ 116.039357][ T29] audit: type=1326 audit(1734476898.887:16118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11414 comm="syz.4.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31ebc65d29 code=0x7ffc0000 [ 116.062950][ T29] audit: type=1326 audit(1734476898.887:16119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11414 comm="syz.4.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f31ebc65d29 code=0x7ffc0000 [ 116.086569][ T29] audit: type=1326 audit(1734476898.887:16120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11414 comm="syz.4.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31ebc65d29 code=0x7ffc0000 [ 116.270651][T11426] tap0: tun_chr_ioctl cmd 1074025676 [ 116.276005][T11426] tap0: owner set to 0 [ 116.785274][T11539] loop3: detected capacity change from 0 to 1024 [ 116.803018][T11539] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 116.815340][T11535] loop5: detected capacity change from 0 to 1024 [ 116.829373][T11535] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 116.840273][T11535] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 116.855341][T11539] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.1184: Invalid block bitmap block 0 in block_group 0 [ 116.878287][T11539] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.1184: Failed to acquire dquot type 0 [ 116.891213][T11535] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 116.906607][T11539] EXT4-fs error (device loop3): ext4_free_blocks:6589: comm syz.3.1184: Freeing blocks not in datazone - block = 0, count = 4096 [ 116.921547][T11535] EXT4-fs error (device loop5): ext4_get_journal_inode:5809: comm syz.5.1183: inode #1: comm syz.5.1183: iget: illegal inode # [ 116.935496][T11539] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.1184: Invalid inode bitmap blk 0 in block_group 0 [ 116.949235][ T3794] EXT4-fs error (device loop3): ext4_release_dquot:6961: comm kworker/u8:12: Failed to release dquot type 0 [ 116.961162][T11535] EXT4-fs (loop5): no journal found [ 116.966490][T11535] EXT4-fs (loop5): can't get journal size [ 116.975193][T11535] EXT4-fs (loop5): failed to initialize system zone (-22) [ 116.984494][T11539] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 116.994510][T11535] EXT4-fs (loop5): mount failed [ 116.999580][T11539] EXT4-fs (loop3): 1 orphan inode deleted [ 117.022210][T11539] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1184'. [ 117.046457][T11547] tap0: tun_chr_ioctl cmd 1074025676 [ 117.051786][T11547] tap0: owner set to 0 [ 117.059709][T11539] EXT4-fs error (device loop3): ext4_lookup:1813: inode #15: comm syz.3.1184: iget: bad extra_isize 65535 (inode size 256) [ 117.159815][T11566] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1191'. [ 117.182721][T11566] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 117.227196][T11567] loop5: detected capacity change from 0 to 2048 [ 117.233751][T11567] ext4: Unknown parameter 'blkio.bfq.io_wait_time' [ 117.299629][T11586] loop5: detected capacity change from 0 to 1024 [ 117.314715][T11586] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 117.333379][T11586] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.1193: Invalid block bitmap block 0 in block_group 0 [ 117.359857][T11586] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.1193: Failed to acquire dquot type 0 [ 117.381645][T11586] EXT4-fs error (device loop5): ext4_free_blocks:6589: comm syz.5.1193: Freeing blocks not in datazone - block = 0, count = 4096 [ 117.395783][T11586] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.1193: Invalid inode bitmap blk 0 in block_group 0 [ 117.408547][ T4972] EXT4-fs error (device loop5): ext4_release_dquot:6961: comm kworker/u8:21: Failed to release dquot type 0 [ 117.410237][T11586] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 117.429081][T11586] EXT4-fs (loop5): 1 orphan inode deleted [ 117.447727][T11582] loop4: detected capacity change from 0 to 512 [ 117.448937][T11586] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1193'. [ 117.466220][T11586] EXT4-fs error (device loop5): ext4_lookup:1813: inode #15: comm syz.5.1193: iget: bad extra_isize 65535 (inode size 256) [ 117.479922][T11582] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 117.488238][T11582] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 117.661765][T11633] loop4: detected capacity change from 0 to 1024 [ 117.667745][T11641] loop3: detected capacity change from 0 to 1024 [ 117.671697][T11633] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 117.685422][T11633] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 117.698365][T11633] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 117.709281][T11633] EXT4-fs error (device loop4): ext4_get_journal_inode:5809: comm syz.4.1199: inode #1: comm syz.4.1199: iget: illegal inode # [ 117.743809][T11633] EXT4-fs (loop4): no journal found [ 117.749078][T11633] EXT4-fs (loop4): can't get journal size [ 117.758139][T11633] EXT4-fs (loop4): failed to initialize system zone (-22) [ 117.770437][T11633] EXT4-fs (loop4): mount failed [ 117.955517][T11687] vlan2: entered allmulticast mode [ 117.978632][T11691] validate_nla: 1 callbacks suppressed [ 117.978647][T11691] netlink: 'syz.4.1206': attribute type 4 has an invalid length. [ 118.002523][T11693] futex_wake_op: syz.3.1207 tries to shift op by -1; fix this program [ 118.139289][T11700] vlan2: entered allmulticast mode [ 118.195109][T11707] vlan2: entered allmulticast mode [ 118.290693][T11717] loop4: detected capacity change from 0 to 1024 [ 118.298504][T11717] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 118.309458][T11717] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 118.319539][T11717] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 118.357565][T11717] EXT4-fs error (device loop4): ext4_get_journal_inode:5809: comm syz.4.1216: inode #1: comm syz.4.1216: iget: illegal inode # [ 118.371807][T11717] EXT4-fs (loop4): no journal found [ 118.377148][T11717] EXT4-fs (loop4): can't get journal size [ 118.384320][T11717] EXT4-fs (loop4): failed to initialize system zone (-22) [ 118.392831][T11717] EXT4-fs (loop4): mount failed [ 118.442925][T11734] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1223'. [ 118.837108][T11788] vlan2: entered allmulticast mode [ 118.965214][T11812] FAULT_INJECTION: forcing a failure. [ 118.965214][T11812] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 118.978346][T11812] CPU: 1 UID: 0 PID: 11812 Comm: syz.5.1231 Not tainted 6.13.0-rc3-syzkaller-00026-g59dbb9d81adf #0 [ 118.989118][T11812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 118.999259][T11812] Call Trace: [ 119.002541][T11812] [ 119.005598][T11812] dump_stack_lvl+0xf2/0x150 [ 119.010204][T11812] dump_stack+0x15/0x1a [ 119.014360][T11812] should_fail_ex+0x223/0x230 [ 119.019093][T11812] should_fail+0xb/0x10 [ 119.023249][T11812] should_fail_usercopy+0x1a/0x20 [ 119.028273][T11812] _copy_from_user+0x1e/0xb0 [ 119.032860][T11812] copy_msghdr_from_user+0x54/0x2a0 [ 119.038061][T11812] ? __fget_files+0x17c/0x1c0 [ 119.042764][T11812] __sys_sendmmsg+0x1e8/0x4b0 [ 119.047448][T11812] __x64_sys_sendmmsg+0x57/0x70 [ 119.052390][T11812] x64_sys_call+0x29aa/0x2dc0 [ 119.057056][T11812] do_syscall_64+0xc9/0x1c0 [ 119.061555][T11812] ? clear_bhb_loop+0x55/0xb0 [ 119.066299][T11812] ? clear_bhb_loop+0x55/0xb0 [ 119.070965][T11812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.076889][T11812] RIP: 0033:0x7f3114cb5d29 [ 119.081294][T11812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.100896][T11812] RSP: 002b:00007f3113321038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 119.109351][T11812] RAX: ffffffffffffffda RBX: 00007f3114ea5fa0 RCX: 00007f3114cb5d29 [ 119.117312][T11812] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000004 [ 119.125333][T11812] RBP: 00007f3113321090 R08: 0000000000000000 R09: 0000000000000000 [ 119.133293][T11812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.141252][T11812] R13: 0000000000000000 R14: 00007f3114ea5fa0 R15: 00007ffe568a76b8 [ 119.149265][T11812] [ 119.160675][T11817] tap0: tun_chr_ioctl cmd 1074025676 [ 119.166052][T11817] tap0: owner set to 0 [ 119.251471][T11830] loop5: detected capacity change from 0 to 1024 [ 119.260342][T11830] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 119.271373][T11830] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 119.281228][T11830] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 119.360061][T11867] futex_wake_op: syz.4.1238 tries to shift op by -1; fix this program [ 119.364765][T11830] EXT4-fs error (device loop5): ext4_get_journal_inode:5809: comm syz.5.1235: inode #1: comm syz.5.1235: iget: illegal inode # [ 119.466123][T11830] EXT4-fs (loop5): no journal found [ 119.471362][T11830] EXT4-fs (loop5): can't get journal size [ 119.495499][T11830] EXT4-fs (loop5): failed to initialize system zone (-22) [ 119.516964][T11830] EXT4-fs (loop5): mount failed [ 119.537519][T11879] vlan2: entered allmulticast mode [ 119.596473][T11884] FAULT_INJECTION: forcing a failure. [ 119.596473][T11884] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 119.609663][T11884] CPU: 0 UID: 0 PID: 11884 Comm: syz.5.1243 Not tainted 6.13.0-rc3-syzkaller-00026-g59dbb9d81adf #0 [ 119.620500][T11884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 119.630559][T11884] Call Trace: [ 119.633840][T11884] [ 119.636768][T11884] dump_stack_lvl+0xf2/0x150 [ 119.641419][T11884] dump_stack+0x15/0x1a [ 119.645585][T11884] should_fail_ex+0x223/0x230 [ 119.650284][T11884] should_fail+0xb/0x10 [ 119.654445][T11884] should_fail_usercopy+0x1a/0x20 [ 119.659536][T11884] strncpy_from_user+0x25/0x210 [ 119.664447][T11884] ? kmem_cache_alloc_noprof+0x18e/0x320 [ 119.670155][T11884] ? getname_flags+0x81/0x3b0 [ 119.674835][T11884] getname_flags+0xb0/0x3b0 [ 119.679381][T11884] getname+0x17/0x20 [ 119.683271][T11884] do_sys_openat2+0x67/0x120 [ 119.687907][T11884] __x64_sys_openat+0xf3/0x120 [ 119.692773][T11884] x64_sys_call+0x2b30/0x2dc0 [ 119.697444][T11884] do_syscall_64+0xc9/0x1c0 [ 119.701952][T11884] ? clear_bhb_loop+0x55/0xb0 [ 119.706642][T11884] ? clear_bhb_loop+0x55/0xb0 [ 119.711417][T11884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.717335][T11884] RIP: 0033:0x7f3114cb4690 [ 119.721858][T11884] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 119.741581][T11884] RSP: 002b:00007f3113320f00 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 119.750005][T11884] RAX: ffffffffffffffda RBX: 0000000000000101 RCX: 00007f3114cb4690 [ 119.757970][T11884] RDX: 0000000000000101 RSI: 00007f3113320fa0 RDI: 00000000ffffff9c [ 119.765983][T11884] RBP: 00007f3113320fa0 R08: 0000000000000000 R09: 00007f3113320d17 [ 119.773965][T11884] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 119.781946][T11884] R13: 0000000000000000 R14: 00007f3114ea5fa0 R15: 00007ffe568a76b8 [ 119.789972][T11884] [ 119.798815][T11888] tap0: tun_chr_ioctl cmd 1074025676 [ 119.804237][T11888] tap0: owner set to 0 [ 119.897236][T11905] tap0: tun_chr_ioctl cmd 1074025676 [ 119.902558][T11905] tap0: owner set to 0 [ 119.930147][T11912] netlink: 'syz.3.1249': attribute type 4 has an invalid length. [ 119.979282][T11921] netlink: 'syz.1.1250': attribute type 4 has an invalid length. [ 119.991237][T11921] netlink: 'syz.1.1250': attribute type 4 has an invalid length. [ 120.054689][T11937] FAULT_INJECTION: forcing a failure. [ 120.054689][T11937] name failslab, interval 1, probability 0, space 0, times 0 [ 120.067348][T11937] CPU: 1 UID: 0 PID: 11937 Comm: syz.3.1251 Not tainted 6.13.0-rc3-syzkaller-00026-g59dbb9d81adf #0 [ 120.078130][T11937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 120.088201][T11937] Call Trace: [ 120.091489][T11937] [ 120.094420][T11937] dump_stack_lvl+0xf2/0x150 [ 120.099083][T11937] dump_stack+0x15/0x1a [ 120.103290][T11937] should_fail_ex+0x223/0x230 [ 120.108016][T11937] should_failslab+0x8f/0xb0 [ 120.112662][T11937] __kmalloc_noprof+0xab/0x3f0 [ 120.117496][T11937] ? inotify_handle_inode_event+0x127/0x310 [ 120.123436][T11937] inotify_handle_inode_event+0x127/0x310 [ 120.129275][T11937] ? __pfx_inotify_handle_inode_event+0x10/0x10 [ 120.135609][T11937] fsnotify_handle_inode_event+0x18e/0x1f0 [ 120.141478][T11937] fsnotify+0xfc4/0x1190 [ 120.145823][T11937] __fsnotify_parent+0x330/0x380 [ 120.150770][T11937] __fput+0x5a5/0x6d0 [ 120.154768][T11937] ____fput+0x1c/0x30 [ 120.158797][T11937] task_work_run+0x13a/0x1a0 [ 120.163393][T11937] syscall_exit_to_user_mode+0xa8/0x120 [ 120.168937][T11937] do_syscall_64+0xd6/0x1c0 [ 120.173452][T11937] ? clear_bhb_loop+0x55/0xb0 [ 120.178134][T11937] ? clear_bhb_loop+0x55/0xb0 [ 120.182829][T11937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.188720][T11937] RIP: 0033:0x7f650c055d29 [ 120.193254][T11937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.212912][T11937] RSP: 002b:00007f650a6a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000124 [ 120.221398][T11937] RAX: 000000000000000c RBX: 00007f650c246080 RCX: 00007f650c055d29 [ 120.229433][T11937] RDX: 0000000000000000 RSI: 000000000000000c RDI: 0000000000000004 [ 120.237419][T11937] RBP: 00007f650a6a6090 R08: 0000000000000000 R09: 0000000000000000 [ 120.245491][T11937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.253451][T11937] R13: 0000000000000000 R14: 00007f650c246080 R15: 00007ffda9be9e38 [ 120.261428][T11937] [ 120.321635][T11950] IPv6: Can't replace route, no match found [ 120.622813][T12004] FAULT_INJECTION: forcing a failure. [ 120.622813][T12004] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 120.635948][T12004] CPU: 0 UID: 0 PID: 12004 Comm: syz.3.1260 Not tainted 6.13.0-rc3-syzkaller-00026-g59dbb9d81adf #0 [ 120.646772][T12004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 120.656890][T12004] Call Trace: [ 120.660159][T12004] [ 120.663079][T12004] dump_stack_lvl+0xf2/0x150 [ 120.667672][T12004] dump_stack+0x15/0x1a [ 120.671866][T12004] should_fail_ex+0x223/0x230 [ 120.676535][T12004] should_fail+0xb/0x10 [ 120.680700][T12004] should_fail_usercopy+0x1a/0x20 [ 120.685725][T12004] _copy_from_user+0x1e/0xb0 [ 120.690331][T12004] __sys_bpf+0x14e/0x7a0 [ 120.694571][T12004] __x64_sys_bpf+0x43/0x50 [ 120.698985][T12004] x64_sys_call+0x2914/0x2dc0 [ 120.703688][T12004] do_syscall_64+0xc9/0x1c0 [ 120.708229][T12004] ? clear_bhb_loop+0x55/0xb0 [ 120.712896][T12004] ? clear_bhb_loop+0x55/0xb0 [ 120.717563][T12004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.723456][T12004] RIP: 0033:0x7f650c055d29 [ 120.727865][T12004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.747470][T12004] RSP: 002b:00007f650a6c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 120.755878][T12004] RAX: ffffffffffffffda RBX: 00007f650c245fa0 RCX: 00007f650c055d29 [ 120.763843][T12004] RDX: 0000000000000050 RSI: 0000000020000600 RDI: 000000000000000a [ 120.771812][T12004] RBP: 00007f650a6c7090 R08: 0000000000000000 R09: 0000000000000000 [ 120.779802][T12004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.787837][T12004] R13: 0000000000000000 R14: 00007f650c245fa0 R15: 00007ffda9be9e38 [ 120.795804][T12004] [ 120.809190][T12006] netlink: 'syz.0.1261': attribute type 4 has an invalid length. [ 120.829288][T12011] x_tables: duplicate underflow at hook 1 [ 120.859581][ T29] kauditd_printk_skb: 883 callbacks suppressed [ 120.859596][ T29] audit: type=1326 audit(1734476903.797:16998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12012 comm="syz.0.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa905435d29 code=0x7ffc0000 [ 120.867308][T12009] netlink: 'syz.5.1262': attribute type 4 has an invalid length. [ 120.889463][ T29] audit: type=1326 audit(1734476903.807:16999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12012 comm="syz.0.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa905435d29 code=0x7ffc0000 [ 120.920771][ T29] audit: type=1326 audit(1734476903.807:17000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12012 comm="syz.0.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa905435d29 code=0x7ffc0000 [ 120.944385][ T29] audit: type=1326 audit(1734476903.807:17001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12012 comm="syz.0.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa905435d29 code=0x7ffc0000 [ 120.967954][ T29] audit: type=1326 audit(1734476903.807:17002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12012 comm="syz.0.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa905435d29 code=0x7ffc0000 [ 120.983414][T12016] netlink: 'syz.5.1262': attribute type 4 has an invalid length. [ 120.991613][ T29] audit: type=1326 audit(1734476903.807:17003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12012 comm="syz.0.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa905435d29 code=0x7ffc0000 [ 121.022894][ T29] audit: type=1326 audit(1734476903.807:17004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12012 comm="syz.0.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa905435d29 code=0x7ffc0000 [ 121.046510][ T29] audit: type=1326 audit(1734476903.807:17005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12012 comm="syz.0.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa90543592b code=0x7ffc0000 [ 121.070020][ T29] audit: type=1326 audit(1734476903.807:17006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12012 comm="syz.0.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa905434690 code=0x7ffc0000 [ 121.093653][ T29] audit: type=1326 audit(1734476903.807:17007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12012 comm="syz.0.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa905435d29 code=0x7ffc0000 [ 121.120544][T12023] futex_wake_op: syz.3.1266 tries to shift op by -1; fix this program [ 121.359355][T11934] syz.1.1253 (11934) used greatest stack depth: 6256 bytes left [ 121.377750][T12036] tap0: tun_chr_ioctl cmd 1074025676 [ 121.383124][T12036] tap0: owner set to 0 [ 121.453869][T12056] netlink: 'syz.1.1274': attribute type 4 has an invalid length. [ 121.523700][T12072] netlink: 'syz.1.1278': attribute type 4 has an invalid length. [ 121.552537][T12072] netlink: 'syz.1.1278': attribute type 4 has an invalid length. [ 121.576761][T12082] vlan2: entered allmulticast mode [ 121.601046][T12085] loop5: detected capacity change from 0 to 1024 [ 121.617502][T12085] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 121.632624][T12085] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.1281: Invalid block bitmap block 0 in block_group 0 [ 121.651515][T12085] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.1281: Failed to acquire dquot type 0 [ 121.671761][T12085] EXT4-fs error (device loop5): ext4_free_blocks:6589: comm syz.5.1281: Freeing blocks not in datazone - block = 0, count = 4096 [ 121.702307][T12085] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.1281: Invalid inode bitmap blk 0 in block_group 0 [ 121.727114][ T4531] EXT4-fs error (device loop5): ext4_release_dquot:6961: comm kworker/u8:20: Failed to release dquot type 0 [ 121.749237][T12085] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 121.776544][T12085] EXT4-fs (loop5): 1 orphan inode deleted [ 121.792688][T12085] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1281'. [ 121.811944][T12085] EXT4-fs error (device loop5): ext4_lookup:1813: inode #15: comm syz.5.1281: iget: bad extra_isize 65535 (inode size 256) [ 121.931017][T12127] loop1: detected capacity change from 0 to 512 [ 121.940866][T12127] EXT4-fs (loop1): orphan cleanup on readonly fs [ 121.955964][T12127] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1284: bg 0: block 248: padding at end of block bitmap is not set [ 121.983033][T12127] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.1284: Failed to acquire dquot type 1 [ 122.018885][T12127] EXT4-fs (loop1): 1 truncate cleaned up [ 122.292396][T12181] FAULT_INJECTION: forcing a failure. [ 122.292396][T12181] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 122.305502][T12181] CPU: 1 UID: 0 PID: 12181 Comm: syz.0.1289 Not tainted 6.13.0-rc3-syzkaller-00026-g59dbb9d81adf #0 [ 122.316407][T12181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 122.326452][T12181] Call Trace: [ 122.329752][T12181] [ 122.332675][T12181] dump_stack_lvl+0xf2/0x150 [ 122.337267][T12181] dump_stack+0x15/0x1a [ 122.341429][T12181] should_fail_ex+0x223/0x230 [ 122.346101][T12181] should_fail+0xb/0x10 [ 122.350268][T12181] should_fail_usercopy+0x1a/0x20 [ 122.355287][T12181] _copy_from_iter+0xd5/0xd00 [ 122.359964][T12181] ? mntput_no_expire+0x70/0x3c0 [ 122.364917][T12181] ? mntput+0x49/0x70 [ 122.368900][T12181] tun_get_user+0x14e/0x25b0 [ 122.373615][T12181] ? _parse_integer_limit+0x167/0x180 [ 122.379039][T12181] ? _parse_integer+0x27/0x30 [ 122.383792][T12181] ? ref_tracker_alloc+0x1f5/0x2f0 [ 122.388945][T12181] tun_chr_write_iter+0x188/0x240 [ 122.393969][T12181] vfs_write+0x77f/0x920 [ 122.398229][T12181] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 122.403772][T12181] ksys_write+0xe8/0x1b0 [ 122.408008][T12181] __x64_sys_write+0x42/0x50 [ 122.412599][T12181] x64_sys_call+0x287e/0x2dc0 [ 122.417265][T12181] do_syscall_64+0xc9/0x1c0 [ 122.421808][T12181] ? clear_bhb_loop+0x55/0xb0 [ 122.426477][T12181] ? clear_bhb_loop+0x55/0xb0 [ 122.431211][T12181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.437132][T12181] RIP: 0033:0x7fa905435d29 [ 122.441687][T12181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.461368][T12181] RSP: 002b:00007fa903aa7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 122.469815][T12181] RAX: ffffffffffffffda RBX: 00007fa905625fa0 RCX: 00007fa905435d29 [ 122.477780][T12181] RDX: 0000000000000ffe RSI: 0000000020000240 RDI: 0000000000000003 [ 122.485739][T12181] RBP: 00007fa903aa7090 R08: 0000000000000000 R09: 0000000000000000 [ 122.493823][T12181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.501873][T12181] R13: 0000000000000000 R14: 00007fa905625fa0 R15: 00007fff66acd838 [ 122.509888][T12181] [ 122.554145][T12184] loop4: detected capacity change from 0 to 1024 [ 122.632224][T12197] loop1: detected capacity change from 0 to 128 [ 122.679885][T12197] FAT-fs (loop1): Directory bread(block 162) failed [ 122.692205][T12197] FAT-fs (loop1): Directory bread(block 163) failed [ 122.708073][T12197] FAT-fs (loop1): Directory bread(block 164) failed [ 122.715790][T12197] FAT-fs (loop1): Directory bread(block 165) failed [ 122.723936][T12197] FAT-fs (loop1): Directory bread(block 166) failed [ 122.736948][T12197] FAT-fs (loop1): Directory bread(block 167) failed [ 122.745023][T12197] FAT-fs (loop1): Directory bread(block 168) failed [ 122.752823][T12197] FAT-fs (loop1): Directory bread(block 169) failed [ 122.770036][T12211] vlan2: entered allmulticast mode [ 122.770083][ T5775] ================================================================== [ 122.783245][ T5775] BUG: KCSAN: data-race in __dev_open / is_upper_ndev_bond_master_filter [ 122.791675][ T5775] [ 122.793990][ T5775] read-write to 0xffff888116eaf0b0 of 4 bytes by task 12211 on cpu 1: [ 122.802130][ T5775] __dev_open+0x24b/0x2e0 [ 122.806467][ T5775] __dev_change_flags+0x155/0x410 [ 122.811493][ T5775] rtnl_newlink_create+0x2ac/0x5d0 [ 122.816617][ T5775] rtnl_newlink+0xe20/0x1200 [ 122.821216][ T5775] rtnetlink_rcv_msg+0x651/0x710 [ 122.826159][ T5775] netlink_rcv_skb+0x12c/0x230 [ 122.830925][ T5775] rtnetlink_rcv+0x1c/0x30 [ 122.835345][ T5775] netlink_unicast+0x599/0x670 [ 122.840108][ T5775] netlink_sendmsg+0x5cc/0x6e0 [ 122.844876][ T5775] __sock_sendmsg+0x140/0x180 [ 122.849560][ T5775] ____sys_sendmsg+0x312/0x410 [ 122.854333][ T5775] __sys_sendmsg+0x19d/0x230 [ 122.858919][ T5775] __x64_sys_sendmsg+0x46/0x50 [ 122.863677][ T5775] x64_sys_call+0x2734/0x2dc0 [ 122.868346][ T5775] do_syscall_64+0xc9/0x1c0 [ 122.872842][ T5775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.878734][ T5775] [ 122.881047][ T5775] read to 0xffff888116eaf0b0 of 4 bytes by task 5775 on cpu 0: [ 122.888576][ T5775] is_upper_ndev_bond_master_filter+0x2b/0xb0 [ 122.894641][ T5775] ib_enum_roce_netdev+0x124/0x1d0 [ 122.899747][ T5775] ib_enum_all_roce_netdevs+0x8a/0x100 [ 122.905200][ T5775] netdevice_event_work_handler+0x67/0x3c0 [ 122.911002][ T5775] process_scheduled_works+0x483/0x9a0 [ 122.916455][ T5775] worker_thread+0x51d/0x6f0 [ 122.921038][ T5775] kthread+0x1d1/0x210 [ 122.925095][ T5775] ret_from_fork+0x4b/0x60 [ 122.929498][ T5775] ret_from_fork_asm+0x1a/0x30 [ 122.934249][ T5775] [ 122.936558][ T5775] value changed: 0x00005082 -> 0x00005283 [ 122.942257][ T5775] [ 122.944567][ T5775] Reported by Kernel Concurrency Sanitizer on: [ 122.950698][ T5775] CPU: 0 UID: 0 PID: 5775 Comm: kworker/u8:24 Not tainted 6.13.0-rc3-syzkaller-00026-g59dbb9d81adf #0 [ 122.961619][ T5775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 122.971667][ T5775] Workqueue: gid-cache-wq netdevice_event_work_handler [ 122.978513][ T5775] ================================================================== [ 123.030724][T12205] tap0: tun_chr_ioctl cmd 1074025676 [ 123.036096][T12205] tap0: owner set to 0