last executing test programs: 2.895586158s ago: executing program 0 (id=227): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x9c, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @local}}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 2.855439358s ago: executing program 0 (id=229): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x80400) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x0, &(0x7f0000000040)={[{@sysvgroups}, {@stripe}, {@auto_da_alloc}, {@quota}, {@nogrpid}, {@norecovery}, {}, {@noinit_itable}]}, 0x6, 0x640, &(0x7f00000013c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x1e, 0x80000, 0x2) r2 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) r3 = dup3(r0, r1, 0x0) ioctl$MON_IOCG_STATS(r3, 0xc0109207, 0x0) 2.842634128s ago: executing program 4 (id=230): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mprotect(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0xb) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file2\x00', 0x4204, &(0x7f0000003240)=ANY=[], 0x2, 0x334, &(0x7f0000002900)="$eJzs3M1LI2ccwPFfXk0imhxKSwvFh/bSXgZNey4NRaE0UFFTqoXCqJM2ZJpIJlhSStVTr6X3PS3sQTx6E3b3H/Cyt93LXvbmZWEP62F3Z5k3864xG4mr3w9InjzP80vmeUn4zeDk5Of//igXLa2o1yWcUBISETkVyUhYAiH/MeyW49JqV76cfPH40+XVtR9y+fz8klILuZWvskqp6Zn7f/6d9LsdTchx5teT59lnxx8ef3zyZuX3kqVKlqpU60pX69WndX3dNNRmySprSi2ahm4ZqlSxjJrXXvXai2Z1a6uh9MrmVGqrZliW0isNVTYaql5V9VpD6b/ppYrSNE1NpQQXKewvLem5IYM3RnwwuCK1Wk6PiEiyq6WwP5YDAgAAY9WZ/4edlH6o/F+m3fzf6dzM/w8+e1if/Olw2s//j+K98v+vn3iv1Zb/J0RkmPz/jlwi/+/OiG6Xd8r/cT3MxLuqQm3PnPw/5X9+XXu/HMy6BfJ/AAAAAAAAAAAAAAAAAAAAAADeB6e2nbZtOx08Bn/NWwj857iR+q3/hIgknNW3Wf+bbHl1TRLujXvOGpv/bhe2C96j0/ra9oghs5KWV+5+COrEtoM7j5QjIw/MHT9+Z7sQcVtyRSmJKYbMSVoynfG2vfB9fn5Oefz4s9uUUq3xWUnLB73js+3x/vvH5YvPW+I1ScujDamKKZvuvm7G/zOn1Hc/5jvik24/AAAAAABuAk2d6Xn+rmn92r1fGckV3ctEfa4PeOfXsz3Pz6PpT6LjHj0AAAAAALeD1firrJumUTunkJSL+wxfiA7WOd5REzuvc6RlhIMeT9y9kCHSr09kwBm7O+CsthWCf6Roa0r4lcNNbzD+ka3XbmtNWAaIinYe/IxToS757nv+QM5qgstG8T7zLIvdrxNu2wntsxob2X7+6P97L0f3AfnmMNgBF3fea6mJDbznTdNIdO46txDr/40RHsXXDgAAAIAxaCb9Qc23rc2hsRwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC3zJX8pF9HYdxjBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK6LtwEAAP//04b4lA==") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x134) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x11, r2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x50) read$msr(r2, 0x0, 0x0) close(r1) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xfffffdef}}, 0x1) recvfrom(r4, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 2.209520896s ago: executing program 0 (id=240): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$packet(0x11, 0x3, 0x300) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000040c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r4, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000a00)={r5}, 0x4) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000040)=r6, 0x4) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) sendmmsg$inet(r2, &(0x7f00000039c0)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r7, 0x0, 0x0, 0x12000000, 0x0, 0x0) r8 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r8, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbff}, 0xc) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 2.091234156s ago: executing program 0 (id=241): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_buf(r0, 0x29, 0x48, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6_vti0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl1\x00', r2, 0x4, 0x8, 0x0, 0x1a14, 0x4, @mcast1, @mcast2, 0x700, 0x40, 0x7fff, 0x6}}) 2.090570686s ago: executing program 0 (id=242): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r0, 0x0) socket$inet6(0xa, 0x80002, 0x88) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {@barrier}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@noquota}, {@nogrpid}, {@noauto_da_alloc}, {@mblk_io_submit}]}, 0x1, 0x56a, &(0x7f00000015c0)="$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") socket$inet_udplite(0x2, 0x2, 0x88) socket$can_bcm(0x1d, 0x2, 0x2) socket(0x10, 0x80002, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001ec0)={0x6, 0x3, &(0x7f0000001c00)=@framed, &(0x7f0000001c40)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x40, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x3, 0x3c) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) 1.920048306s ago: executing program 0 (id=245): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, 0x0, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='scsi_dispatch_cmd_start\x00', r0, 0x0, 0x13}, 0x18) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r1, &(0x7f0000000340), 0x2000011a) socket$unix(0x1, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r3}, 0x10) creat(&(0x7f0000000040)='./bus\x00', 0x82) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x109000) modify_ldt$write(0x1, &(0x7f0000000000)={0x5, 0x1000, 0x2000}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r7}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000180)=0xffffffffffffffff, 0x4) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, &(0x7f00000000c0)={0x1, 0x0, 0x4006, 0x3, 0xf}) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x101) 1.880348265s ago: executing program 4 (id=247): r0 = syz_io_uring_setup(0x6534, &(0x7f00000000c0)={0x0, 0xa9ef, 0x80, 0x3, 0x8002ae}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000000, 0x1010, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0x6, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x109880}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x11, &(0x7f0000000180), 0x8, 0x5fb, &(0x7f00000004c0)="$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") socket$key(0xf, 0x3, 0x2) syz_io_uring_setup(0x6534, &(0x7f00000000c0)={0x0, 0xa9ef, 0x80, 0x3, 0x8002ae}, &(0x7f0000000140), &(0x7f0000000280)) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000000, 0x1010, r0, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0x6, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x109880}) (async) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) (async) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x10) (async) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x11, &(0x7f0000000180), 0x8, 0x5fb, &(0x7f00000004c0)="$eJzs3c9vFGUfAPDvTH/Svu/bQt6oeJAmxkCitLSAIcZEuBOCP26eKi0EKZTQGi2SWBK8mBgvHkw8eRD/CyXx6sGrBy+eDAkxhoMYImtmO1Om293SX7tbup9PMnSeme48z5R++5199nlmAuhYI9k/acT+iLiaRAyV9nVHvnNk6fvu/3njXLYkUam8/UcSNz5JFsvHSvKvg/mL/xmK5Oc0Yl/X6nrnFq5fmpyZmb6Wl8fmL18dm1u4fvji5ckL0xemr0y8OnHi+LHjJ8aPbOn8ylWfvvX+h0OfnXn3268fJuPf/XomiZPxKP+G7LxqX9u3pZqzn9lIVJY8KG/Pfq4ntnjsneKvoeL35LGkdgM7Vpr/Pv4vIp6Noegq/W8OxadvtrVxQFNVkihyFNBxkk3Ff//2NwRoseI6oHhvX+998Gppk69KgFa4d2qpA2Ap9nsiooj/7qW+weiPbOvA/WRFP08SEVvrmVuS1fHTj2duZUs06IcDmmPxZtHLXZv/k2psDkd/tTRwP10R/2lpyba/tcn6R2rK4h9aZ/FmRDyX5//e2FD8j5Ti/71N1i/+AQAAAAAAYPvcORURr9Qb/5cuj//prTP+ZzAiTm5D/U/+/C+9m68k21AdUHLvVMTrdcf/Lo/xHe7KS/+tjgfoSc5fnJk+ks8ZPBQ9fVl5vOa45RHChz/f91Wj+svj/7Ilq78YC5gf6W53zUTcqcn5ya2eNxBx72bE89XxvwfyLSvH/2T5P6mT/7P4vrrOOva9dPtso31Pjn+gWSrfRBysm/8fX24na9+fY6x6PTBWXBWs9sLHX3zfqH7xD+2T5f+BteO/Lynfr2duY8fvjYijC92VRvs3e/3fm7zTVRw/89Hk/Py18Yje5PTq7RMbazPsVkU8FPGSxf+hF9fu/1u+/i/F4Z6IWFxnnc88Gvyt0T75H9oni/+ptfP/8Mr8v/GVidvDPzSq/+y68v+xak4/lG/R/wdlq+/Hsd4AbUtzAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOApl0bEfyJJR5fX03R0NGIwIv4fA+nM7Nz8y+dnP7gyle2rPv8/LZ70O7RUTorn/w+XyhM15aMRsTcivuzaUy2PnpudmWr3yQMAAAAAAAAAAAAAAAAAAMAOMVid81/pq53/n/m9q92tA5quO/8q3qHzdG/6lZW+bW0I0HKbj3/gabf++O9pajuA1msc/w8eVqpa2hyghVz/Q+faZPz7uAB2AfkfOtU6+/T6m90OoB3kfwAAAAAA2FX2HrjzSxIRi6/tqS6Z3nyfwf6wu6XtbgDQNsbwQufqnm13C4B28R4fSJbX/q472b/x6P+kOQ0CAAAAAAAAAAAAAFY5uN/8f+hUa8//N7YfdrM15v/XC363C4BdpPGjP+R+2O28xweelO3N/wcAAAAAAAAAAACAHaD/+qXJmZnpa3MLT9/KGzujGRtbWZzcEc3Y1pVHzTlyT0TsjBNs9UpxC442NqPNf5cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBl/wYAAP//SlcnIw==") (async) socket$key(0xf, 0x3, 0x2) (async) 1.705572275s ago: executing program 4 (id=249): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x18, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x300000}, [@btf_id={0x18, 0x0, 0x3, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffd}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @alu={0x4, 0x1, 0x1, 0x7, 0x3, 0xffffffffffffffe0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffff9}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0xcc, &(0x7f0000000240)=""/204, 0x41000, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x0, 0x5, 0x8}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000400)=[0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000480)=[{0x0, 0x5, 0x0, 0x2}, {0x3, 0x4, 0x90, 0x1}, {0x4, 0x1, 0x9, 0x3}, {0x4, 0x2, 0x0, 0x2}, {0x5, 0x3, 0x2, 0x4}, {0x3, 0x4, 0x5, 0x5}, {0x2, 0x4, 0xe, 0xb}, {0x4, 0x4, 0xf, 0xa}, {0x0, 0x4, 0x7, 0x1}, {0x3, 0x5, 0x1, 0x7}], 0x10, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000900c0000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 1.418391624s ago: executing program 4 (id=256): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x80400) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x0, &(0x7f0000000040)={[{@sysvgroups}, {@stripe}, {@auto_da_alloc}, {@quota}, {@nogrpid}, {@norecovery}, {}, {@noinit_itable}]}, 0x6, 0x640, &(0x7f00000013c0)="$eJzs3c9rXFsdAPDvvZPkJWl86RMRX1AMuHgP5KVJfVh1Y1sXdlGwYBciLhqapIZOf5CkYGvBBFwoKIi4LdKN/4B76d6dCOrOtVBFKha0dB73zp1mMplfaTIzSe7nA5M599wzOeebOyf33HvnzA2gtOazH2nE+xGvbyQRs03rZqK+cr4o9+Lfj29mjyRqte/+K4mkyGuUT4rnM8XCZET86XLEpyv76918+Oj2crVW95OIc1t37p/bfPjoo/U7y7dWb63eXTr/tY8vLH596eOlpoa+vTPF85Wr3/n8L3/6w6+u/bn6URIX4/r4j1eiJY6jMh/z8boIsTl/LCIuZIk2f5eT5hSEUGqV4v04HhGfjdmo5Et1s7H+i5E2DhioWiWi1l3SqwBwUuneUFaNcUDj2L6/4+DrAx6VDM/zS/UDoP3xjxWnHCbzY6PpF0nTkVH93MbZI6g/q+PV48knrx7PPYk95yFevtk6Y0dQTyfbOxHxuXbxJ3nbzuaRZvGne471k4hYjIiJon3fOkQbkqb0IM7DdHOQ+Ju3QxoRF4vnLP/yW9bfelpr2PEDUE7PLhU78u1saXf/l409GuOfaDP+mTn8JZncqPd/ncd/jf39ZD7uSVvGYdmY5Vr7XznemvH3n1/5daf66+O/uSeNR1Z/Yyw4DM93IuZa4v9ZFmwx/sniT9ps/6zIjYv91fHtv/zzSqd1o46/9jTig7bHP7uj0izV5frkubX16upi/WfbOv7wxx/8rlP97eN/ZwCRtpdt/+kO8Tdt/7T1ddnf5H77X7nTmvH7a0/vdKp/puf2T/8xkdSPNyeKnB/tbG1tLEVMJFeLIkX+8tbWxvnu8dbLvKzlz0v1+D/8Uvv+v+f93xLVVONfZh/uf+/2i07r3ub933Qx+XWtzzZ0ksW/0nv77+v/Wd6v+qzjv99/8IVO67rFP3WYwAAAAAAAAKCE0vwabJIuvEmn6cJCfb7sZ2I6rd7b3Pry2r0Hd1ciPsw/DzmeRprkHxmZrS8na+vV1aXi87CN5fMty1+JiPci4jeVqXx54ea96sqogwcAAAAAAAAAAAAAAAAAAIBj4kwx/79xn+r/VOrz/4GS6H2DuX33fwBOiUHeYBI43vL+320X/+7w2gIMl/0/lJf+D+Wl/0N56f9QXvo/lJf+D+Wl/0N56f8AAAAAcCq998Vnf0siYvsbU/kjM1GsM+kXTrfxA5WuDKwdwPDp0VBeby79G+xD6fQ1/v9f8eWAg28OMAJJu8x8cFDr3vmftX3lrp3Dtw0AAAAAAAAAAAAAqPvg/c7z/w82Nxg4aUz7g/I6xPx/Xx0AJ5yv/ofycowP9JjFH5OdVvSa/w8AAAAAAAAAAAAAHJmZ/JGkC8Vc4JlI04WFiE9FxNkYT9bWq6uLEfFuRPy1Mv5Otrw06kYDAAAAAAAAAAAAAAAAAADAKbP58NHt5Wp1daM58f99Oac70bgLau/CtT7KdE18Mw74qkiG/2eZioiRb5SBJcaacpKI7WzLH4uGbWzG8WhGnhjxPyYAAAAAAAAAAAAAAAAAACihprnH7c39dsgtAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDh273/f4/EynT9BX0V3psYdYwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMn0SQAAAP//riA8Ng==") r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r2}, 0x18) socket(0x1e, 0x80000, 0x2) r3 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) r4 = dup3(r0, r1, 0x0) ioctl$MON_IOCG_STATS(r4, 0xc0109207, 0x0) 1.061326943s ago: executing program 2 (id=261): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000002580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)}, 0xfffffff4}], 0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_int(r0, 0x29, 0x42, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 952.644203ms ago: executing program 2 (id=263): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) unshare(0x24060400) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x5) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01dfffffff0000000000210000000c00018008000100", @ANYRES32=r5], 0x20}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000008c0)='page_pool_state_hold\x00'}, 0x18) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r8, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) creat(&(0x7f0000000040)='./file0\x00', 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='9p_protocol_dump\x00', r10}, 0x18) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r11}, 0x2c, {'wfdno', 0x3d, r12}}) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r13 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x2000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r13, 0x40345410, &(0x7f0000000540)={{0x1}}) close(r13) r14 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x90000, 0xc0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='svc_authenticate\x00', r14, 0x0, 0x9}, 0x18) 793.532932ms ago: executing program 4 (id=264): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r3 = io_uring_setup(0x2282, &(0x7f0000000140)) r4 = dup3(r2, r3, 0x0) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, 0x0) r5 = fcntl$dupfd(r1, 0x406, r0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r5) r6 = gettid() setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000000)=0x3ff, 0x4) r7 = timerfd_create(0x0, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) r9 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timerfd_settime(r7, 0x3, &(0x7f0000000440)={{0x0, 0x989680}, {r10, r11+10000000}}, 0x0) read(r7, &(0x7f0000000240)=""/123, 0x7b) tkill(r6, 0x7) fcntl$setownex(r0, 0xf, &(0x7f00000002c0)={0x2, r6}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x4000000, 0x42032, r0, 0x0) r12 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r13, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000340)=0x17, 0x4) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x10, 0x0, 0x56, 0xffffffff}) fsmount(0xffffffffffffffff, 0x1, 0x7) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0xc62, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r12}, 0x2c, {[{@noextend}, {@ignoreqv}, {@access_any}, {@access_uid={'access', 0x3d, r13}}], [{@obj_type}, {@subj_user={'subj_user', 0x3d, 'D$'}}, {@fsname={'fsname', 0x3d, '$+*)[-\\'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '*&-'}}, {@fowner_lt={'fowner<', r14}}]}}) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000000)=0xffffffffffff1a75, 0x8) 765.464992ms ago: executing program 1 (id=265): sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_sset_info={0x37, 0x6, 0x6}}) 727.620652ms ago: executing program 1 (id=266): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000840)='sys_enter\x00', r1}, 0x18) creat(&(0x7f0000000040)='./bus\x00', 0x0) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000900)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 726.579142ms ago: executing program 2 (id=267): syz_clone3(&(0x7f0000000440)={0x20820080, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300), {0x2}, &(0x7f0000000340)=""/90, 0x5a, &(0x7f00000003c0)=""/17, &(0x7f0000000400)=[0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0xa}, 0x58) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {@barrier}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@noquota}, {@nogrpid}, {@noauto_da_alloc}, {@mblk_io_submit}]}, 0x1, 0x56a, &(0x7f00000015c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000800)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x84}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000140)='sched_switch\x00', r3, 0x0, 0x3}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000008000000040000000900000008000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000003780)={0x0, 0x0, 0x0, 0x0, 0x80000001, r5, 0x4}, 0x38) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+|[@\x00') r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wg2\x00', 0x0}) r8 = openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x200400, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0x20, &(0x7f0000000540)={&(0x7f00000006c0)=""/254, 0xfe, 0x0, &(0x7f00000004c0)=""/89, 0x59}}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x14, r11, 0x1}, 0x14}}, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001f00)={0x4, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0xfffff04e, 0xd1, &(0x7f00000005c0)=""/209, 0x1e00, 0x0, '\x00', r7, @fallback=0x1c, r8, 0x8, &(0x7f0000000240)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0x1, 0x4548, 0xf}, 0x10, r9, 0xffffffffffffffff, 0x0, &(0x7f0000001ec0)=[0xffffffffffffffff, r1, r1, r12], 0x0, 0x10, 0x10, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='mm_page_free\x00', r6, 0x0, 0xfffffffffffffffe}, 0x18) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x2000018, &(0x7f0000000040)=ANY=[], 0x1, 0x747, &(0x7f0000000fc0)="$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") ioctl$TIOCGRS485(r0, 0x542e, &(0x7f0000001fc0)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001cc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa0c, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 710.946431ms ago: executing program 1 (id=268): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) socket$packet(0x11, 0x3, 0x300) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000200)='dctcp\x00', 0x6) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r1, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000900)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206bb2b0e", 0x26}], 0x1}}], 0x1, 0xc0) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00) 705.062692ms ago: executing program 4 (id=269): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x2, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x9, 0x40000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb01001800000000000000ac000000ac00000004000000000000000000000300000000ffffffff0100000000000000000000000000000d04000000020000000100000f020000000400000000000000010000003923feffffff0800000f0200000002000000060000000200000003000000ff01000003000000050000000b000000ff7f0000050000000700000001000000020000000080000001000000040000000800000006000000050000000800000002000000050000000000000009000000921c00006100e0f0dc3d39cb68bc366bbc7b73b1b414cd7976a4a75691f87ed4fd81eb9602c941a7d084c086edc35425b6d5e72b51c148f2d403dbabe093c2fc3c37f2ecc1fbf5788ef2ee9dac3ecfab55822afc417c3ee7"], &(0x7f00000006c0)=""/196, 0xc8, 0xc4, 0x1, 0x0, 0x0, @void, @value}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000007000000020000000c1737b8d8e98f6c2705000000000000b3c527ca716e1355de9b6d2feede1b9970daf4b2", @ANYRES16=r1, @ANYBLOB="bdceb6b97966a9a4efc3f90458a49706af515f4e8e1db0716ad466b430b02e303279bdb83c352649ed93321fe5b87c34a6feed426d46f5d5fd7eda278be7", @ANYRES64=r1], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x100000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) syz_clone(0x22f391a85c812f9e, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_register(r1, &(0x7f0000000040)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x2, 0x3a, ']\\\'\'&.*', 0x3a, 'GPL\x00', 0x3a, './file0', 0x3a, [0x43, 0x50, 0x4f]}, 0x35) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5, 0x0, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r6}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) ioctl$KDSIGACCEPT(r4, 0x5607, 0x3) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x8002, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg(r8, 0x0, 0x2008885) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioperm(0x8, 0x5, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r10, &(0x7f0000000900)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2, 0x41}, 0x1c, 0x0}}, {{&(0x7f0000000580)={0xa, 0x4e23, 0x7f, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYBLOB], 0x1a8}}], 0x2, 0x0) ioctl$VT_ACTIVATE(r4, 0x5606, 0x4) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, &(0x7f00000000c0)={0xb828, 0x5, [{0xc}, {0x8}, {0x4, 0x1}, {0x7, 0x1}, {0xa}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) 617.724561ms ago: executing program 1 (id=270): r0 = syz_io_uring_setup(0x83f, &(0x7f00000000c0)={0x0, 0xa9ee, 0x400, 0x3, 0x8002ae}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x109880}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0xb8, 0x7ffc0002}]}) alarm(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x8000000004) setreuid(0x0, 0xee01) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000400)="580000001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd000000100001000c0808004149004001040800", 0x58}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4, 0x0, 0x2}, 0x18) clock_nanosleep(0x8, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@nombcache}, {@resgid}, {@norecovery}, {@commit={'commit', 0x3d, 0x5}}, {@nombcache}]}, 0x8, 0x5fb, &(0x7f00000004c0)="$eJzs3c9vFGUfAPDvTH/Svu/bQt6oeJAmxkCitLSAIcZEuBOCP26eKi0EKZTQGi2SWBK8mBgvHkw8eRD/CyXx6sGrBy+eDAkxhoMYImtmO1Om293SX7tbup9PMnSeme48z5R++5199nlmAuhYI9k/acT+iLiaRAyV9nVHvnNk6fvu/3njXLYkUam8/UcSNz5JFsvHSvKvg/mL/xmK5Oc0Yl/X6nrnFq5fmpyZmb6Wl8fmL18dm1u4fvji5ckL0xemr0y8OnHi+LHjJ8aPbOn8ylWfvvX+h0OfnXn3268fJuPf/XomiZPxKP+G7LxqX9u3pZqzn9lIVJY8KG/Pfq4ntnjsneKvoeL35LGkdgM7Vpr/Pv4vIp6Noegq/W8OxadvtrVxQFNVkihyFNBxkk3Ff//2NwRoseI6oHhvX+998Gppk69KgFa4d2qpA2Ap9nsiooj/7qW+weiPbOvA/WRFP08SEVvrmVuS1fHTj2duZUs06IcDmmPxZtHLXZv/k2psDkd/tTRwP10R/2lpyba/tcn6R2rK4h9aZ/FmRDyX5//e2FD8j5Ti/71N1i/+AQAAAAAAYPvcORURr9Qb/5cuj//prTP+ZzAiTm5D/U/+/C+9m68k21AdUHLvVMTrdcf/Lo/xHe7KS/+tjgfoSc5fnJk+ks8ZPBQ9fVl5vOa45RHChz/f91Wj+svj/7Ilq78YC5gf6W53zUTcqcn5ya2eNxBx72bE89XxvwfyLSvH/2T5P6mT/7P4vrrOOva9dPtso31Pjn+gWSrfRBysm/8fX24na9+fY6x6PTBWXBWs9sLHX3zfqH7xD+2T5f+BteO/Lynfr2duY8fvjYijC92VRvs3e/3fm7zTVRw/89Hk/Py18Yje5PTq7RMbazPsVkU8FPGSxf+hF9fu/1u+/i/F4Z6IWFxnnc88Gvyt0T75H9oni/+ptfP/8Mr8v/GVidvDPzSq/+y68v+xak4/lG/R/wdlq+/Hsd4AbUtzAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOApl0bEfyJJR5fX03R0NGIwIv4fA+nM7Nz8y+dnP7gyle2rPv8/LZ70O7RUTorn/w+XyhM15aMRsTcivuzaUy2PnpudmWr3yQMAAAAAAAAAAAAAAAAAAMAOMVid81/pq53/n/m9q92tA5quO/8q3qHzdG/6lZW+bW0I0HKbj3/gabf++O9pajuA1msc/w8eVqpa2hyghVz/Q+faZPz7uAB2AfkfOtU6+/T6m90OoB3kfwAAAAAA2FX2HrjzSxIRi6/tqS6Z3nyfwf6wu6XtbgDQNsbwQufqnm13C4B28R4fSJbX/q472b/x6P+kOQ0CAAAAAAAAAAAAAFY5uN/8f+hUa8//N7YfdrM15v/XC363C4BdpPGjP+R+2O28xweelO3N/wcAAAAAAAAAAACAHaD/+qXJmZnpa3MLT9/KGzujGRtbWZzcEc3Y1pVHzTlyT0TsjBNs9UpxC442NqPNf5cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBl/wYAAP//SlcnIw==") socket$key(0xf, 0x3, 0x2) 617.406791ms ago: executing program 2 (id=271): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x80400) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x0, &(0x7f0000000040)={[{@sysvgroups}, {@stripe}, {@auto_da_alloc}, {@quota}, {@nogrpid}, {@norecovery}, {}, {@noinit_itable}]}, 0x6, 0x640, &(0x7f00000013c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x1e, 0x80000, 0x2) r2 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) r3 = dup3(r0, r1, 0x0) ioctl$MON_IOCG_STATS(r3, 0xc0109207, 0x0) 471.794291ms ago: executing program 3 (id=272): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x200000000200}, 0x18) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x1}}) 363.930071ms ago: executing program 3 (id=273): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000100000000000000010200850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x45) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) set_mempolicy(0x3, &(0x7f00000000c0)=0x5, 0xa) open(&(0x7f0000000100)='./file0\x00', 0x542, 0x148) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000001380)=ANY=[@ANYRESDEC=0x0, @ANYRESDEC=r1, @ANYBLOB="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", @ANYRES64=r2, @ANYRESOCT=r4, @ANYRES32, @ANYRES8=r4, @ANYRES32=r3, @ANYRES64=0x0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000900)='netlink_extack\x00', r6}, 0x10) r7 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r9, 0x0, 0x0) r10 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000180)={0xfffffc}, 0x10) write(r10, &(0x7f0000000000)="240000001a005f0214f9f4070009010081ffffff03400003000000000800040001000000", 0x24) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000480)='rxrpc\x00', &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv2(r11, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/139, 0x8b}], 0x1, 0x867, 0x0, 0x0) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r12}, 0x10) 318.4284ms ago: executing program 2 (id=274): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x80400) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x0, &(0x7f0000000040)={[{@sysvgroups}, {@stripe}, {@auto_da_alloc}, {@quota}, {@nogrpid}, {@norecovery}, {}, {@noinit_itable}]}, 0x6, 0x640, &(0x7f00000013c0)="$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") r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r2}, 0x18) socket(0x1e, 0x80000, 0x2) r3 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) r4 = dup3(r0, r1, 0x0) ioctl$MON_IOCG_STATS(r4, 0xc0109207, 0x0) 288.36073ms ago: executing program 1 (id=275): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000680)=@mangle={'mangle\x00', 0x64, 0x6, 0x600, 0x0, 0x0, 0x1d0, 0x0, 0x1d0, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'vcan0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xa8, 0xe8, 0x0, {0x7a00000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'syzkaller1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private0}}}, {{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [], 'veth1_to_batadv\x00', 'vlan1\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@inet=@ecn={{0x28}}, @common=@ipv6header={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty}}}, {{@ipv6={@private0, @mcast2, [], [], 'veth1_to_team\x00', 'veth0_macvtap\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@hbh={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@remote}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x660) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x1c0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, '\x00', 'veth0_to_bond\x00', {}, {}, 0x21}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000000000000004fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0xc}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00', {0xfffffffffffffffc}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000240)={0x0, 0x3, 0x3, 0x4005, 0x86, "ff00f7000000000000000000af88008300"}) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) r9 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r9, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) sendmmsg$inet6(r9, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r11}, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40200000000000061114a0000000000850000008b0000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0x16, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x21) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010300000000000000001c0000000c00018008000100", @ANYRES32=r13], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) 226.64613ms ago: executing program 3 (id=276): sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_sset_info={0x37, 0x6, 0x6}}) 149.94024ms ago: executing program 3 (id=277): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89f1, &(0x7f0000000900)={'bond0\x00', @random="0100002000"}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) syz_emit_ethernet(0x6a, &(0x7f0000000c00)={@local, @random="ad2380eb3968", @void, {@ipv4={0x800, @gre={{0x6, 0x4, 0x3, 0x1a, 0x5c, 0x66, 0x0, 0x7, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x88, 0x2}, @generic={0x44, 0x2}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x1, 0x0, 0x1, 0x1}, {0x1}, {0x8, 0x88be, 0x0, {{0x1, 0x1, 0x8d, 0x3, 0x1, 0x1, 0x3, 0x4}, 0x1, {0x510}}}, {0x8, 0x22eb, 0x4, {{0xb, 0x2, 0x10, 0x1, 0x0, 0x3, 0x4, 0x7}, 0x2, {0x3, 0x6, 0x3, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1}}}}}}}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$key(0xf, 0x3, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000005c0)={&(0x7f0000000240)="f7b16c6e5f7673fa83ab032d787cb07c506edf0ab2a2c08a42d198a534fa13ab7eb98730952edc1382d92439e07696b70e7238281010b5b37345a41f390028fba3823f27343d1740a2e7c4137a6784f2e7799a7ff0dbc4ddcf39c932069a84afa5b1739fcdae747794d3fae4ee45a930abfba0330ccc440466b5951f4138853a775a4c04cdff364d2005284fc554751b16f9ae19b6b7e751f56ff0cea548070de1b430476d6e4494a8e25a9f88ab592cc492191f23d89350b097efe71b0d5c4bfb841dffdc0ecbec3b4217121f19e360ae6911a22b56694fee07", &(0x7f0000000340)=""/10, &(0x7f00000003c0)="aeaf5b71a67fcffeedb6f3da6796daff5dba284df77a9acdd18a314e8312a07513ba56a0e983b6cf98745395acc79a88afed3e2668a6a71afae340f7b2ba895f2f", &(0x7f0000000500)="ad62b6b6d2d002e3e553a1052ca0b3fdafbfb4372f00cb1a91c48d60b6fbcc752d48e06758a10bcbdb0f7f350fc03e9f58de41c55d2184de6a04df40272ea7bf279a1018b214582395175c7a4cbdc3e42959689c9050694f596bca89384c65c9398a95065b7e220afafdb758b3bfc1b364edba1d03626415a0de6528e432d2370e7366c7fde1d86de09fdf0a2a9f83e4ec4622db81312a4a3094eae80e4b9d6a0e5c120b218de1e96c", 0x6, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x10, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) io_setup(0x4, &(0x7f00000001c0)=0x0) r7 = eventfd2(0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/reserved_size', 0x20f41, 0x90) io_submit(r6, 0x1, &(0x7f0000002200)=[&(0x7f0000001b00)={0x0, 0x0, 0x20, 0x8, 0x1a0, r10, 0x0, 0x0, 0x1, 0x0, 0x1, r7}]) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="0202000311000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000bb000000000000000002000100000000000000000b000000000200090000000000000000000000000005000600000000000a00000000000000fe8800000000000000010000000000010000000000000000010018"], 0x88}}, 0x0) 149.14672ms ago: executing program 3 (id=278): add_key(0x0, 0x0, &(0x7f0000000100)="010000", 0x3, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, &(0x7f0000000440), 0x8000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 73.87385ms ago: executing program 3 (id=279): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x6) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x80000000000000a, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r3}, 0x10) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r1}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x2, 0x800800000003}, 0x1100, 0x5dd8, 0x3, 0x5, 0x0, 0x8, 0xff7b, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) add_key(&(0x7f0000000080)='asymmetric\x00', 0x0, &(0x7f0000000980)='S', 0x1, 0xfffffffffffffffe) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r4}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 26.45402ms ago: executing program 1 (id=280): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = open(0x0, 0x64842, 0x86) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r2 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0xfd29, 0x11780, 0x200000, 0x0, 0x0, r1}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_TIMEOUT={0xb, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001400)={0x0, 0x3938700}}) io_uring_enter(r2, 0x6b4d, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x0, 0x2, 0x7, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000100000100c280"], 0x48}}, 0x40000) 0s ago: executing program 2 (id=281): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4cf68d79c8eac253, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\n\x00\x00'], 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4]}}}}]}, 0x88}}, 0x20000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(0xffffffffffffffff, 0x2def, 0x0, 0x0, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000180)='scmi_xfer_end\x00'}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x18, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = syz_socket_connect_nvme_tcp() ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) r2 = creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r3, &(0x7f00000023c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000240)={0x1, 0x3, 0xfffffffffffffffc, 0x4, 0x4, 0x8}) preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/238, 0xee}], 0x1, 0x50b, 0x8) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000000)={0x847, 0x5, 0x1, 'queue1\x00', 0x6000}) 0s ago: executing program 3 (id=282): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mprotect(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0xb) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file2\x00', 0x4204, &(0x7f0000003240)=ANY=[], 0x2, 0x334, &(0x7f0000002900)="$eJzs3M1LI2ccwPFfXk0imhxKSwvFh/bSXgZNey4NRaE0UFFTqoXCqJM2ZJpIJlhSStVTr6X3PS3sQTx6E3b3H/Cyt93LXvbmZWEP62F3Z5k3864xG4mr3w9InjzP80vmeUn4zeDk5Of//igXLa2o1yWcUBISETkVyUhYAiH/MeyW49JqV76cfPH40+XVtR9y+fz8klILuZWvskqp6Zn7f/6d9LsdTchx5teT59lnxx8ef3zyZuX3kqVKlqpU60pX69WndX3dNNRmySprSi2ahm4ZqlSxjJrXXvXai2Z1a6uh9MrmVGqrZliW0isNVTYaql5V9VpD6b/ppYrSNE1NpQQXKewvLem5IYM3RnwwuCK1Wk6PiEiyq6WwP5YDAgAAY9WZ/4edlH6o/F+m3fzf6dzM/w8+e1if/Olw2s//j+K98v+vn3iv1Zb/J0RkmPz/jlwi/+/OiG6Xd8r/cT3MxLuqQm3PnPw/5X9+XXu/HMy6BfJ/AAAAAAAAAAAAAAAAAAAAAADeB6e2nbZtOx08Bn/NWwj857iR+q3/hIgknNW3Wf+bbHl1TRLujXvOGpv/bhe2C96j0/ra9oghs5KWV+5+COrEtoM7j5QjIw/MHT9+Z7sQcVtyRSmJKYbMSVoynfG2vfB9fn5Oefz4s9uUUq3xWUnLB73js+3x/vvH5YvPW+I1ScujDamKKZvuvm7G/zOn1Hc/5jvik24/AAAAAABuAk2d6Xn+rmn92r1fGckV3ctEfa4PeOfXsz3Pz6PpT6LjHj0AAAAAALeD1firrJumUTunkJSL+wxfiA7WOd5REzuvc6RlhIMeT9y9kCHSr09kwBm7O+CsthWCf6Roa0r4lcNNbzD+ka3XbmtNWAaIinYe/IxToS757nv+QM5qgstG8T7zLIvdrxNu2wntsxob2X7+6P97L0f3AfnmMNgBF3fea6mJDbznTdNIdO46txDr/40RHsXXDgAAAIAxaCb9Qc23rc2hsRwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC3zJX8pF9HYdxjBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK6LtwEAAP//04b4lA==") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x134) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x11, r2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x50) read$msr(r2, 0x0, 0x0) close(r1) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r4, 0x0, 0x0, 0x4100, 0x0, 0x0) kernel console output (not intermixed with test programs): interface not active [ 26.898239][ T3304] hsr_slave_0: entered promiscuous mode [ 26.904219][ T3304] hsr_slave_1: entered promiscuous mode [ 26.930846][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.937848][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.963781][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.974874][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.981814][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.007716][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.023354][ T3301] team0: Port device team_slave_0 added [ 27.030649][ T3301] team0: Port device team_slave_1 added [ 27.036546][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.043497][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.069467][ T3296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.080478][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.087429][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.113317][ T3296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.158830][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.165839][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.191780][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.213173][ T3297] hsr_slave_0: entered promiscuous mode [ 27.219167][ T3297] hsr_slave_1: entered promiscuous mode [ 27.224998][ T3297] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.232535][ T3297] Cannot create hsr debugfs directory [ 27.239106][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.246124][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.272057][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.306943][ T3302] hsr_slave_0: entered promiscuous mode [ 27.313190][ T3302] hsr_slave_1: entered promiscuous mode [ 27.319219][ T3302] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.326774][ T3302] Cannot create hsr debugfs directory [ 27.338270][ T3296] hsr_slave_0: entered promiscuous mode [ 27.344261][ T3296] hsr_slave_1: entered promiscuous mode [ 27.350115][ T3296] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.357700][ T3296] Cannot create hsr debugfs directory [ 27.403423][ T3301] hsr_slave_0: entered promiscuous mode [ 27.409508][ T3301] hsr_slave_1: entered promiscuous mode [ 27.415372][ T3301] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.422932][ T3301] Cannot create hsr debugfs directory [ 27.543378][ T3304] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 27.558388][ T3304] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 27.580353][ T3304] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 27.592758][ T3304] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 27.608426][ T3302] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 27.616751][ T3302] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 27.626586][ T3302] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 27.635086][ T3302] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 27.679257][ T3297] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 27.688317][ T3297] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 27.696783][ T3301] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 27.706092][ T3301] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 27.714616][ T3297] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 27.727593][ T3301] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 27.736128][ T3301] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 27.744583][ T3297] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 27.775274][ T3296] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 27.805361][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.814550][ T3296] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 27.826905][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.836666][ T3296] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 27.848749][ T3296] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 27.864611][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.877621][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.886587][ T165] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.893635][ T165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.909703][ T165] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.916747][ T165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.925978][ T165] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.933018][ T165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.947162][ T165] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.954221][ T165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.988533][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.024434][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.042353][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.049396][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.058611][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.065705][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.092139][ T3297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.115272][ T3296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.133380][ T3296] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.150139][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.162461][ T3297] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.173370][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.180499][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.191485][ T2171] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.198560][ T2171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.221002][ T3296] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 28.231477][ T3296] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.249109][ T2171] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.256220][ T2171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.264984][ T2171] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.272038][ T2171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.293013][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.319937][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.393597][ T3296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.409226][ T3302] veth0_vlan: entered promiscuous mode [ 28.424872][ T3302] veth1_vlan: entered promiscuous mode [ 28.449525][ T3297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.476844][ T3301] veth0_vlan: entered promiscuous mode [ 28.500901][ T3301] veth1_vlan: entered promiscuous mode [ 28.519732][ T3302] veth0_macvtap: entered promiscuous mode [ 28.530311][ T3304] veth0_vlan: entered promiscuous mode [ 28.541541][ T3304] veth1_vlan: entered promiscuous mode [ 28.548856][ T3302] veth1_macvtap: entered promiscuous mode [ 28.564950][ T3297] veth0_vlan: entered promiscuous mode [ 28.573334][ T3297] veth1_vlan: entered promiscuous mode [ 28.590680][ T3296] veth0_vlan: entered promiscuous mode [ 28.604298][ T3301] veth0_macvtap: entered promiscuous mode [ 28.615780][ T3304] veth0_macvtap: entered promiscuous mode [ 28.623210][ T3304] veth1_macvtap: entered promiscuous mode [ 28.629577][ T3301] veth1_macvtap: entered promiscuous mode [ 28.636392][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.644641][ T3297] veth0_macvtap: entered promiscuous mode [ 28.651713][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.659647][ T3296] veth1_vlan: entered promiscuous mode [ 28.671552][ T3297] veth1_macvtap: entered promiscuous mode [ 28.679366][ T3302] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.688244][ T3302] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.696946][ T3302] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.705782][ T3302] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.721831][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.732333][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.742843][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.758902][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.769520][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.779432][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.789889][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.800481][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.809186][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.819698][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.830365][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.838889][ T3297] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.847650][ T3297] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.856357][ T3297] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.865080][ T3297] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.875676][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.886127][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.896025][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.906492][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.916310][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.926769][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.937018][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.948991][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.959517][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.969340][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.979838][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.990145][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.997969][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.008431][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.018251][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.028667][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.038661][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.049111][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.059419][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.067024][ T3296] veth0_macvtap: entered promiscuous mode [ 29.079380][ T3301] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.088328][ T3301] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.097280][ T3301] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.105985][ T3301] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.118151][ T3304] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.126986][ T3304] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.135739][ T3304] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.144477][ T3304] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.158309][ T3296] veth1_macvtap: entered promiscuous mode [ 29.168210][ T3302] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 29.211739][ T3436] loop0: detected capacity change from 0 to 1024 [ 29.224789][ T3296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.235281][ T3296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.245108][ T3296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.255523][ T3296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.265419][ T3296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.275858][ T3296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.285697][ T3296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.296111][ T3296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.307216][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.308132][ T3436] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 29.325628][ T3296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.336962][ T3296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.346828][ T3296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.357350][ T3296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.367174][ T3296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.377649][ T3296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.387470][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 29.387481][ T3296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.387482][ T29] audit: type=1400 audit(1738202775.208:129): avc: denied { perfmon } for pid=3442 comm="syz.4.5" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 29.393559][ T3296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.395208][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.404006][ T29] audit: type=1400 audit(1738202775.208:130): avc: denied { prog_run } for pid=3442 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 29.429753][ T3436] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 29.488109][ T3296] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.497005][ T3296] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.501543][ T29] audit: type=1400 audit(1738202775.258:131): avc: denied { write } for pid=3435 comm="+}[@" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 29.505903][ T3296] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.526908][ T29] audit: type=1400 audit(1738202775.258:132): avc: denied { add_name } for pid=3435 comm="+}[@" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 29.526931][ T29] audit: type=1400 audit(1738202775.258:133): avc: denied { create } for pid=3435 comm="+}[@" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 29.526953][ T29] audit: type=1400 audit(1738202775.258:134): avc: denied { write open } for pid=3435 comm="+}[@" path="/0/bus/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 29.527000][ T29] audit: type=1400 audit(1738202775.258:135): avc: denied { read } for pid=3435 comm="syz.0.1" name="bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 29.535776][ T3296] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.568492][ T29] audit: type=1400 audit(1738202775.388:136): avc: denied { open } for pid=3446 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 29.646190][ T29] audit: type=1400 audit(1738202775.388:137): avc: denied { kernel } for pid=3446 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 29.677934][ T29] audit: type=1400 audit(1738202775.478:138): avc: denied { read } for pid=3449 comm="syz.2.3" dev="nsfs" ino=4026532746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 29.700463][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.825306][ T3468] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3468 comm=syz.2.10 [ 29.847884][ T3470] loop0: detected capacity change from 0 to 1024 [ 29.864519][ T3470] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 29.880608][ T3470] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 29.901549][ T3475] loop2: detected capacity change from 0 to 164 [ 29.909293][ T3475] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 29.909664][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.921264][ T3475] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 30.008097][ C1] hrtimer: interrupt took 37090 ns [ 30.059654][ T3482] loop0: detected capacity change from 0 to 1024 [ 30.096187][ T3482] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.138079][ T3482] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 30.170457][ T3482] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 30.182822][ T3482] EXT4-fs (loop0): This should not happen!! Data will be lost [ 30.182822][ T3482] [ 30.192493][ T3482] EXT4-fs (loop0): Total free blocks count 0 [ 30.198546][ T3482] EXT4-fs (loop0): Free/Dirty block details [ 30.204509][ T3482] EXT4-fs (loop0): free_blocks=68451041280 [ 30.210388][ T3482] EXT4-fs (loop0): dirty_blocks=64 [ 30.215514][ T3482] EXT4-fs (loop0): Block reservation details [ 30.221500][ T3482] EXT4-fs (loop0): i_reserved_data_blocks=4 [ 30.249075][ T3482] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 30.288210][ T3482] +}[@ (3482) used greatest stack depth: 9576 bytes left [ 30.459456][ T3491] loop3: detected capacity change from 0 to 2048 [ 30.467552][ T3491] EXT4-fs: Ignoring removed nobh option [ 30.489391][ T3493] loop2: detected capacity change from 0 to 1024 [ 30.504160][ T3491] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.522267][ T3491] EXT4-fs (loop3): shut down requested (0) [ 30.529454][ T3493] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 30.542323][ T3491] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 30.551243][ T3491] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 30.570677][ T3493] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.17: Invalid block bitmap block 0 in block_group 0 [ 30.587633][ T3493] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.17: Failed to acquire dquot type 0 [ 30.588482][ T3491] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16'. [ 30.605060][ T3493] EXT4-fs error (device loop2): ext4_free_blocks:6589: comm syz.2.17: Freeing blocks not in datazone - block = 0, count = 4096 [ 30.622448][ T3493] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.17: Invalid inode bitmap blk 0 in block_group 0 [ 30.636339][ T3493] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 30.646451][ T2171] EXT4-fs error (device loop2): ext4_release_dquot:6950: comm kworker/u8:6: Failed to release dquot type 0 [ 30.659333][ T3493] EXT4-fs (loop2): 1 orphan inode deleted [ 30.665740][ T3493] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.680192][ T3501] loop1: detected capacity change from 0 to 1024 [ 30.682687][ T3503] loop4: detected capacity change from 0 to 1024 [ 30.706677][ T3503] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.729716][ T3503] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 30.734166][ T3501] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.768364][ T3491] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 30.788242][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.798611][ T3493] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 30.814597][ T3501] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 30.869060][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.882929][ T3493] syz.2.17 (3493) used greatest stack depth: 9512 bytes left [ 30.944594][ T3516] loop1: detected capacity change from 0 to 164 [ 30.957799][ T3516] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 30.983022][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.986136][ T3516] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 31.009135][ T3518] loop4: detected capacity change from 0 to 512 [ 31.026019][ T3518] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 31.039121][ T3518] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 31.058262][ T3518] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm syz.4.25: bad orphan inode 131083 [ 31.080479][ T3523] loop1: detected capacity change from 0 to 1024 [ 31.099188][ T3520] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 31.116934][ T3518] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.183346][ T3518] 9pnet_fd: Insufficient options for proto=fd [ 31.208940][ T3520] loop2: detected capacity change from 0 to 1024 [ 31.215192][ T3528] loop0: detected capacity change from 0 to 1024 [ 31.229940][ T3528] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 31.236029][ T3520] EXT4-fs: Ignoring removed mblk_io_submit option [ 31.253657][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.271384][ T3530] loop1: detected capacity change from 0 to 1024 [ 31.285561][ T3528] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.28: Invalid block bitmap block 0 in block_group 0 [ 31.304678][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.314310][ T3530] ext4: Unknown parameter 'subj_role' [ 31.325664][ T3530] xt_hashlimit: max too large, truncated to 1048576 [ 31.326105][ T3528] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.28: Failed to acquire dquot type 0 [ 31.368191][ T3528] EXT4-fs error (device loop0): ext4_free_blocks:6589: comm syz.0.28: Freeing blocks not in datazone - block = 0, count = 4096 [ 31.385255][ T3520] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.413089][ T3528] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.28: Invalid inode bitmap blk 0 in block_group 0 [ 31.428643][ T2171] EXT4-fs error (device loop0): ext4_release_dquot:6950: comm kworker/u8:6: Failed to release dquot type 0 [ 31.463585][ T3537] 9pnet: Could not find request transport: f [ 31.474775][ T3520] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 31.504227][ T3528] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 31.525954][ T3520] netlink: 28 bytes leftover after parsing attributes in process `syz.2.24'. [ 31.528640][ T3542] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 31.534827][ T3520] netlink: 16 bytes leftover after parsing attributes in process `syz.2.24'. [ 31.542228][ T3542] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 31.551012][ T3528] EXT4-fs (loop0): 1 orphan inode deleted [ 31.574372][ T3544] loop3: detected capacity change from 0 to 1024 [ 31.585465][ T3528] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.586287][ T3542] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 31.605454][ T3542] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 31.606107][ T3544] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 31.627264][ T3544] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.34: Invalid block bitmap block 0 in block_group 0 [ 31.643539][ T3544] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.34: Failed to acquire dquot type 0 [ 31.656444][ T3544] EXT4-fs error (device loop3): ext4_free_blocks:6589: comm syz.3.34: Freeing blocks not in datazone - block = 0, count = 4096 [ 31.669999][ T3528] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 31.673569][ T3544] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.34: Invalid inode bitmap blk 0 in block_group 0 [ 31.692985][ T50] EXT4-fs error (device loop3): ext4_release_dquot:6950: comm kworker/u8:3: Failed to release dquot type 0 [ 31.705020][ T3544] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 31.717277][ T3544] EXT4-fs (loop3): 1 orphan inode deleted [ 31.723513][ T3544] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.745926][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.763847][ T3544] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 31.874283][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.887485][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.947563][ T3563] FAULT_INJECTION: forcing a failure. [ 31.947563][ T3563] name failslab, interval 1, probability 0, space 0, times 0 [ 31.960339][ T3563] CPU: 1 UID: 0 PID: 3563 Comm: syz.3.39 Not tainted 6.13.0-syzkaller-09383-gebbb8be421ee #0 [ 31.960418][ T3563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 31.960433][ T3563] Call Trace: [ 31.960437][ T3563] [ 31.960443][ T3563] dump_stack_lvl+0xf2/0x150 [ 31.960469][ T3563] dump_stack+0x15/0x1a [ 31.960486][ T3563] should_fail_ex+0x24a/0x260 [ 31.960516][ T3563] should_failslab+0x8f/0xb0 [ 31.960549][ T3563] kmem_cache_alloc_node_noprof+0x59/0x320 [ 31.960577][ T3563] ? dup_task_struct+0x6c/0x710 [ 31.960607][ T3563] dup_task_struct+0x6c/0x710 [ 31.960633][ T3563] ? kstrtoull+0x110/0x140 [ 31.960723][ T3563] copy_process+0x3a9/0x1fb0 [ 31.960746][ T3563] ? 0xffffffff81000000 [ 31.960759][ T3563] ? selinux_file_permission+0x22a/0x360 [ 31.960779][ T3563] ? __rcu_read_unlock+0x4e/0x70 [ 31.960800][ T3563] kernel_clone+0x167/0x5e0 [ 31.960846][ T3563] ? vfs_write+0x644/0x920 [ 31.960867][ T3563] __x64_sys_clone+0xe8/0x120 [ 31.960909][ T3563] x64_sys_call+0x2d7e/0x2dc0 [ 31.960937][ T3563] do_syscall_64+0xc9/0x1c0 [ 31.960960][ T3563] ? clear_bhb_loop+0x55/0xb0 [ 31.960983][ T3563] ? clear_bhb_loop+0x55/0xb0 [ 31.961005][ T3563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 31.961091][ T3563] RIP: 0033:0x7fc26a85cda9 [ 31.961107][ T3563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 31.961159][ T3563] RSP: 002b:00007fc268ec6fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 31.961174][ T3563] RAX: ffffffffffffffda RBX: 00007fc26aa75fa0 RCX: 00007fc26a85cda9 [ 31.961186][ T3563] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000400 [ 31.961198][ T3563] RBP: 00007fc268ec7090 R08: 0000000000000000 R09: 0000000000000000 [ 31.961210][ T3563] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 31.961221][ T3563] R13: 0000000000000000 R14: 00007fc26aa75fa0 R15: 00007ffe14270bc8 [ 31.961237][ T3563] [ 32.260753][ T3571] loop2: detected capacity change from 0 to 1024 [ 32.305097][ T3579] netlink: 8 bytes leftover after parsing attributes in process `syz.0.46'. [ 32.340500][ T3571] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.357335][ T3579] IPVS: Error joining to the multicast group [ 32.426912][ T3571] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 32.461408][ T3571] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 32.473743][ T3571] EXT4-fs (loop2): This should not happen!! Data will be lost [ 32.473743][ T3571] [ 32.483378][ T3571] EXT4-fs (loop2): Total free blocks count 0 [ 32.489398][ T3571] EXT4-fs (loop2): Free/Dirty block details [ 32.495323][ T3571] EXT4-fs (loop2): free_blocks=68451041280 [ 32.501136][ T3571] EXT4-fs (loop2): dirty_blocks=64 [ 32.506316][ T3571] EXT4-fs (loop2): Block reservation details [ 32.512345][ T3571] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 32.551635][ T3571] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 32.583963][ T3570] loop3: detected capacity change from 0 to 512 [ 32.597197][ T3570] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 32.648465][ T3587] loop2: detected capacity change from 0 to 512 [ 32.667706][ T3587] ======================================================= [ 32.667706][ T3587] WARNING: The mand mount option has been deprecated and [ 32.667706][ T3587] and is ignored by this kernel. Remove the mand [ 32.667706][ T3587] option from the mount to silence this warning. [ 32.667706][ T3587] ======================================================= [ 32.703695][ T3587] EXT4-fs: Ignoring removed oldalloc option [ 32.709783][ T3587] EXT4-fs: inline encryption not supported [ 32.721836][ T3587] EXT4-fs: mb_optimize_scan should be set to 0 or 1. [ 32.763006][ T3587] loop2: detected capacity change from 0 to 512 [ 32.772303][ T3589] loop4: detected capacity change from 0 to 1024 [ 32.800506][ T3587] EXT4-fs warning (device loop2): read_mmp_block:115: Error -117 while reading MMP block 0 [ 32.813027][ T3591] loop3: detected capacity change from 0 to 1024 [ 32.824770][ T3589] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.846114][ T3591] EXT4-fs: Ignoring removed mblk_io_submit option [ 32.848368][ T3596] loop2: detected capacity change from 0 to 1024 [ 32.882730][ T3596] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 32.895042][ T2171] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 32.910449][ T2171] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 64 with error 28 [ 32.922888][ T2171] EXT4-fs (loop4): This should not happen!! Data will be lost [ 32.922888][ T2171] [ 32.932584][ T2171] EXT4-fs (loop4): Total free blocks count 0 [ 32.938643][ T2171] EXT4-fs (loop4): Free/Dirty block details [ 32.944596][ T2171] EXT4-fs (loop4): free_blocks=68451041280 [ 32.950449][ T2171] EXT4-fs (loop4): dirty_blocks=64 [ 32.955596][ T2171] EXT4-fs (loop4): Block reservation details [ 32.961569][ T2171] EXT4-fs (loop4): i_reserved_data_blocks=4 [ 32.968819][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.972888][ T3596] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.50: Invalid block bitmap block 0 in block_group 0 [ 32.991710][ T3591] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.005844][ T3596] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.50: Failed to acquire dquot type 0 [ 33.024754][ T3596] EXT4-fs error (device loop2): ext4_free_blocks:6589: comm syz.2.50: Freeing blocks not in datazone - block = 0, count = 4096 [ 33.038190][ T3596] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.50: Invalid inode bitmap blk 0 in block_group 0 [ 33.052200][ T3596] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 33.060884][ T3596] EXT4-fs (loop2): 1 orphan inode deleted [ 33.069877][ T3596] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.082403][ T165] EXT4-fs error (device loop2): ext4_release_dquot:6950: comm kworker/u8:5: Failed to release dquot type 0 [ 33.095764][ T3601] netlink: 92 bytes leftover after parsing attributes in process `syz.3.49'. [ 33.147537][ T3596] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 33.169326][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.199163][ T3608] netlink: 8 bytes leftover after parsing attributes in process `syz.4.52'. [ 33.213109][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.308236][ T3621] loop2: detected capacity change from 0 to 1024 [ 33.321700][ T3621] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 33.344833][ T3621] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.58: Invalid block bitmap block 0 in block_group 0 [ 33.393164][ T3626] loop3: detected capacity change from 0 to 1024 [ 33.405676][ T3630] loop4: detected capacity change from 0 to 1024 [ 33.431099][ T3621] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.58: Failed to acquire dquot type 0 [ 33.455591][ T3632] loop1: detected capacity change from 0 to 1024 [ 33.464335][ T3621] EXT4-fs error (device loop2): ext4_free_blocks:6589: comm syz.2.58: Freeing blocks not in datazone - block = 0, count = 4096 [ 33.469173][ T3630] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.490554][ T3621] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.58: Invalid inode bitmap blk 0 in block_group 0 [ 33.494965][ T3626] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.515317][ T50] EXT4-fs error (device loop2): ext4_release_dquot:6950: comm kworker/u8:3: Failed to release dquot type 0 [ 33.529224][ T3621] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 33.555663][ T3632] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.568370][ T3621] EXT4-fs (loop2): 1 orphan inode deleted [ 33.577451][ T3630] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 33.597035][ T3621] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.609686][ T50] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 33.628100][ T3632] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 33.644733][ T3630] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 33.656931][ T3630] EXT4-fs (loop4): This should not happen!! Data will be lost [ 33.656931][ T3630] [ 33.666665][ T3630] EXT4-fs (loop4): Total free blocks count 0 [ 33.672635][ T3630] EXT4-fs (loop4): Free/Dirty block details [ 33.678533][ T3630] EXT4-fs (loop4): free_blocks=68451041280 [ 33.684352][ T3630] EXT4-fs (loop4): dirty_blocks=64 [ 33.689468][ T3630] EXT4-fs (loop4): Block reservation details [ 33.693931][ T50] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 64 with error 28 [ 33.695443][ T3630] EXT4-fs (loop4): i_reserved_data_blocks=4 [ 33.707691][ T50] EXT4-fs (loop3): This should not happen!! Data will be lost [ 33.707691][ T50] [ 33.724275][ T50] EXT4-fs (loop3): Total free blocks count 0 [ 33.730247][ T50] EXT4-fs (loop3): Free/Dirty block details [ 33.736244][ T50] EXT4-fs (loop3): free_blocks=68451041280 [ 33.742051][ T50] EXT4-fs (loop3): dirty_blocks=64 [ 33.747201][ T50] EXT4-fs (loop3): Block reservation details [ 33.753269][ T50] EXT4-fs (loop3): i_reserved_data_blocks=4 [ 33.766996][ T3621] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 33.767454][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.786732][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.788910][ T3630] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 33.814667][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.827761][ T3640] loop1: detected capacity change from 0 to 164 [ 33.906763][ T3642] loop3: detected capacity change from 0 to 1024 [ 33.913426][ T3642] EXT4-fs: Ignoring removed mblk_io_submit option [ 33.958467][ T3642] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.995523][ T3651] syzkaller0: entered promiscuous mode [ 34.001149][ T3651] syzkaller0: entered allmulticast mode [ 34.013569][ T3642] netlink: 92 bytes leftover after parsing attributes in process `syz.3.65'. [ 34.030745][ T3657] loop4: detected capacity change from 0 to 2048 [ 34.108083][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.128783][ T3659] loop1: detected capacity change from 0 to 512 [ 34.165594][ T3659] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.188293][ T3659] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.199572][ T3668] loop4: detected capacity change from 0 to 164 [ 34.233597][ T3668] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 34.249841][ T3672] loop3: detected capacity change from 0 to 1024 [ 34.267246][ T3659] FAULT_INJECTION: forcing a failure. [ 34.267246][ T3659] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 34.267269][ T3659] CPU: 1 UID: 0 PID: 3659 Comm: syz.1.73 Not tainted 6.13.0-syzkaller-09383-gebbb8be421ee #0 [ 34.267293][ T3659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 34.267306][ T3659] Call Trace: [ 34.267312][ T3659] [ 34.267317][ T3659] dump_stack_lvl+0xf2/0x150 [ 34.267340][ T3659] dump_stack+0x15/0x1a [ 34.267388][ T3659] should_fail_ex+0x24a/0x260 [ 34.267499][ T3659] should_fail+0xb/0x10 [ 34.267561][ T3659] should_fail_usercopy+0x1a/0x20 [ 34.267595][ T3659] _copy_from_user+0x1c/0xa0 [ 34.267660][ T3659] restore_altstack+0x48/0xd0 [ 34.267751][ T3659] __do_sys_rt_sigreturn+0xd7/0x160 [ 34.267773][ T3659] x64_sys_call+0x2982/0x2dc0 [ 34.267820][ T3659] do_syscall_64+0xc9/0x1c0 [ 34.267847][ T3659] ? clear_bhb_loop+0x55/0xb0 [ 34.268016][ T3659] ? clear_bhb_loop+0x55/0xb0 [ 34.268040][ T3659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 34.268067][ T3659] RIP: 0033:0x7f42259e8fa9 [ 34.268081][ T3659] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 34.268098][ T3659] RSP: 002b:00007f42240b0a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 34.268123][ T3659] RAX: ffffffffffffffda RBX: 00007f4225c65fa0 RCX: 00007f42259e8fa9 [ 34.268132][ T3659] RDX: 00007f42240b0a80 RSI: 00007f42240b0bb0 RDI: 0000000000000021 [ 34.268142][ T3659] RBP: 00007f42240b1090 R08: 0000000000000000 R09: 0000000000000000 [ 34.268153][ T3659] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 34.268164][ T3659] R13: 0000000000000000 R14: 00007f4225c65fa0 R15: 00007ffd13626cc8 [ 34.268213][ T3659] [ 34.302113][ T3668] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 34.340006][ T3672] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.348223][ T3672] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 34.348299][ T3672] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 34.348324][ T3672] EXT4-fs (loop3): This should not happen!! Data will be lost [ 34.348324][ T3672] [ 34.348336][ T3672] EXT4-fs (loop3): Total free blocks count 0 [ 34.348393][ T3672] EXT4-fs (loop3): Free/Dirty block details [ 34.348403][ T3672] EXT4-fs (loop3): free_blocks=68451041280 [ 34.348416][ T3672] EXT4-fs (loop3): dirty_blocks=64 [ 34.348427][ T3672] EXT4-fs (loop3): Block reservation details [ 34.348435][ T3672] EXT4-fs (loop3): i_reserved_data_blocks=4 [ 34.348546][ T3672] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 34.354638][ T3677] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 34.354678][ T3677] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 34.355816][ T3677] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 34.355903][ T3677] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 34.424947][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.426168][ T29] kauditd_printk_skb: 443 callbacks suppressed [ 34.426181][ T29] audit: type=1400 audit(1738202780.248:567): avc: denied { search } for pid=3037 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 34.426337][ T29] audit: type=1400 audit(1738202780.248:568): avc: denied { read } for pid=3037 comm="dhcpcd" name="n25" dev="tmpfs" ino=1120 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 34.426476][ T29] audit: type=1400 audit(1738202780.248:569): avc: denied { open } for pid=3037 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=1120 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 34.426571][ T29] audit: type=1400 audit(1738202780.248:570): avc: denied { getattr } for pid=3037 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=1120 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 34.512790][ T29] audit: type=1400 audit(1738202780.328:571): avc: denied { read } for pid=3685 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=415 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 34.512988][ T29] audit: type=1400 audit(1738202780.328:572): avc: denied { open } for pid=3685 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=415 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 34.513148][ T29] audit: type=1400 audit(1738202780.328:573): avc: denied { getattr } for pid=3685 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=415 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 34.534956][ T3688] loop3: detected capacity change from 0 to 164 [ 34.555052][ T3688] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 34.557226][ T3688] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 34.631942][ T3700] loop4: detected capacity change from 0 to 512 [ 34.649348][ T3700] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.649412][ T3700] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.678380][ T29] audit: type=1400 audit(1738202780.498:574): avc: denied { write } for pid=3683 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=414 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 34.678457][ T29] audit: type=1400 audit(1738202780.498:575): avc: denied { add_name } for pid=3683 comm="dhcpcd-run-hook" name="resolv.conf.cfttyS3.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 34.678479][ T29] audit: type=1400 audit(1738202780.498:576): avc: denied { create } for pid=3683 comm="dhcpcd-run-hook" name="resolv.conf.cfttyS3.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 34.919540][ T3729] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 34.920305][ T3729] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 34.954091][ T3729] process 'syz.1.87' launched './file1' with NULL argv: empty string added [ 35.054707][ T3736] loop0: detected capacity change from 0 to 1024 [ 35.195752][ T3736] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 35.221352][ T3736] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.88: Invalid block bitmap block 0 in block_group 0 [ 35.236288][ T3755] loop1: detected capacity change from 0 to 128 [ 35.253385][ T3736] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.88: Failed to acquire dquot type 0 [ 35.273388][ T3758] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 35.279768][ T3736] EXT4-fs error (device loop0): ext4_free_blocks:6589: comm syz.0.88: Freeing blocks not in datazone - block = 0, count = 4096 [ 35.280828][ T3758] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 35.301268][ T3736] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.88: Invalid inode bitmap blk 0 in block_group 0 [ 35.314064][ T2171] EXT4-fs error (device loop0): ext4_release_dquot:6950: comm kworker/u8:6: Failed to release dquot type 0 [ 35.314420][ T3736] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 35.327553][ T3758] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 35.339114][ T3736] EXT4-fs (loop0): 1 orphan inode deleted [ 35.341441][ T3758] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 35.348533][ T3736] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.396500][ T3736] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 35.420576][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.463288][ T3774] loop2: detected capacity change from 0 to 128 [ 35.500968][ T3776] FAULT_INJECTION: forcing a failure. [ 35.500968][ T3776] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 35.514119][ T3776] CPU: 0 UID: 0 PID: 3776 Comm: syz.3.95 Not tainted 6.13.0-syzkaller-09383-gebbb8be421ee #0 [ 35.514142][ T3776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 35.514181][ T3776] Call Trace: [ 35.514185][ T3776] [ 35.514191][ T3776] dump_stack_lvl+0xf2/0x150 [ 35.514214][ T3776] dump_stack+0x15/0x1a [ 35.514231][ T3776] should_fail_ex+0x24a/0x260 [ 35.514258][ T3776] should_fail+0xb/0x10 [ 35.514338][ T3776] should_fail_usercopy+0x1a/0x20 [ 35.514372][ T3776] _copy_from_user+0x1c/0xa0 [ 35.514390][ T3776] dev_ethtool+0x53/0x14c0 [ 35.514410][ T3776] ? strcmp+0x21/0x50 [ 35.514435][ T3776] ? __rcu_read_unlock+0x4e/0x70 [ 35.514507][ T3776] dev_ioctl+0x854/0xab0 [ 35.514531][ T3776] sock_do_ioctl+0x11c/0x260 [ 35.514551][ T3776] sock_ioctl+0x40f/0x600 [ 35.514568][ T3776] ? __pfx_sock_ioctl+0x10/0x10 [ 35.514585][ T3776] __se_sys_ioctl+0xc9/0x140 [ 35.514623][ T3776] __x64_sys_ioctl+0x43/0x50 [ 35.514638][ T3776] x64_sys_call+0x1690/0x2dc0 [ 35.514661][ T3776] do_syscall_64+0xc9/0x1c0 [ 35.514683][ T3776] ? clear_bhb_loop+0x55/0xb0 [ 35.514756][ T3776] ? clear_bhb_loop+0x55/0xb0 [ 35.514843][ T3776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.514937][ T3776] RIP: 0033:0x7fc26a85cda9 [ 35.514949][ T3776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 35.514964][ T3776] RSP: 002b:00007fc268ec7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 35.514978][ T3776] RAX: ffffffffffffffda RBX: 00007fc26aa75fa0 RCX: 00007fc26a85cda9 [ 35.515032][ T3776] RDX: 0000000020000000 RSI: 0000000000008946 RDI: 0000000000000004 [ 35.515042][ T3776] RBP: 00007fc268ec7090 R08: 0000000000000000 R09: 0000000000000000 [ 35.515051][ T3776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 35.515061][ T3776] R13: 0000000000000000 R14: 00007fc26aa75fa0 R15: 00007ffe14270bc8 [ 35.515077][ T3776] [ 35.581012][ T3779] loop0: detected capacity change from 0 to 128 [ 35.624663][ T3786] loop3: detected capacity change from 0 to 512 [ 35.732820][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.733956][ T3786] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.97: bg 0: block 35: padding at end of block bitmap is not set [ 35.756091][ T3786] EXT4-fs (loop3): Remounting filesystem read-only [ 35.762658][ T3786] EXT4-fs (loop3): 1 truncate cleaned up [ 35.768842][ T3786] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.782230][ T3786] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 35.785573][ T3789] loop4: detected capacity change from 0 to 164 [ 35.789596][ T3786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.804858][ T3789] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 35.819356][ T3789] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 35.866101][ T3793] loop4: detected capacity change from 0 to 1024 [ 35.885098][ T3793] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.901055][ T3793] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 35.917225][ T3793] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 35.929457][ T3793] EXT4-fs (loop4): This should not happen!! Data will be lost [ 35.929457][ T3793] [ 35.939169][ T3793] EXT4-fs (loop4): Total free blocks count 0 [ 35.945182][ T3793] EXT4-fs (loop4): Free/Dirty block details [ 35.951151][ T3793] EXT4-fs (loop4): free_blocks=68451041280 [ 35.956996][ T3793] EXT4-fs (loop4): dirty_blocks=64 [ 35.963116][ T3793] EXT4-fs (loop4): Block reservation details [ 35.969166][ T3793] EXT4-fs (loop4): i_reserved_data_blocks=4 [ 35.977238][ T3793] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 35.984344][ T3799] Zero length message leads to an empty skb [ 36.011613][ T3801] loop3: detected capacity change from 0 to 164 [ 36.024064][ T3801] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 36.037402][ T3801] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 36.062409][ T3806] FAULT_INJECTION: forcing a failure. [ 36.062409][ T3806] name failslab, interval 1, probability 0, space 0, times 0 [ 36.075084][ T3806] CPU: 1 UID: 0 PID: 3806 Comm: syz.3.105 Not tainted 6.13.0-syzkaller-09383-gebbb8be421ee #0 [ 36.075108][ T3806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 36.075119][ T3806] Call Trace: [ 36.075124][ T3806] [ 36.075130][ T3806] dump_stack_lvl+0xf2/0x150 [ 36.075220][ T3806] dump_stack+0x15/0x1a [ 36.075239][ T3806] should_fail_ex+0x24a/0x260 [ 36.075303][ T3806] should_failslab+0x8f/0xb0 [ 36.075328][ T3806] kmem_cache_alloc_node_noprof+0x59/0x320 [ 36.075364][ T3806] ? __alloc_skb+0x10b/0x310 [ 36.075521][ T3806] ? avc_has_perm+0xd4/0x160 [ 36.075543][ T3806] __alloc_skb+0x10b/0x310 [ 36.075567][ T3806] pfkey_sendmsg+0x10d/0x970 [ 36.075590][ T3806] ? avc_has_perm+0xd4/0x160 [ 36.075643][ T3806] ? selinux_socket_sendmsg+0x185/0x1c0 [ 36.075679][ T3806] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 36.075700][ T3806] __sock_sendmsg+0x140/0x180 [ 36.075733][ T3806] ____sys_sendmsg+0x312/0x410 [ 36.075764][ T3806] __sys_sendmsg+0x19d/0x230 [ 36.075830][ T3806] __x64_sys_sendmsg+0x46/0x50 [ 36.075864][ T3806] x64_sys_call+0x2734/0x2dc0 [ 36.075892][ T3806] do_syscall_64+0xc9/0x1c0 [ 36.075920][ T3806] ? clear_bhb_loop+0x55/0xb0 [ 36.075953][ T3806] ? clear_bhb_loop+0x55/0xb0 [ 36.075982][ T3806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.076008][ T3806] RIP: 0033:0x7fc26a85cda9 [ 36.076023][ T3806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 36.076041][ T3806] RSP: 002b:00007fc268ec7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 36.076058][ T3806] RAX: ffffffffffffffda RBX: 00007fc26aa75fa0 RCX: 00007fc26a85cda9 [ 36.076100][ T3806] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000006 [ 36.076112][ T3806] RBP: 00007fc268ec7090 R08: 0000000000000000 R09: 0000000000000000 [ 36.076122][ T3806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 36.076132][ T3806] R13: 0000000000000000 R14: 00007fc26aa75fa0 R15: 00007ffe14270bc8 [ 36.076148][ T3806] [ 36.298745][ T50] FAT-fs (loop1): error, invalid FAT chain (i_pos 548, last_block 8) [ 36.306883][ T50] FAT-fs (loop1): Filesystem has been set read-only [ 36.327697][ T50] FAT-fs (loop1): error, corrupted file size (i_pos 548, 522) [ 36.340495][ T50] FAT-fs (loop2): error, invalid FAT chain (i_pos 548, last_block 8) [ 36.342539][ T3814] loop3: detected capacity change from 0 to 512 [ 36.348652][ T50] FAT-fs (loop2): Filesystem has been set read-only [ 36.369812][ T50] FAT-fs (loop2): error, corrupted file size (i_pos 548, 522) [ 36.379735][ T3813] x_tables: duplicate underflow at hook 3 [ 36.404868][ T3814] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.109: bg 0: block 35: padding at end of block bitmap is not set [ 36.413689][ T3822] loop2: detected capacity change from 0 to 164 [ 36.419923][ T3814] EXT4-fs (loop3): Remounting filesystem read-only [ 36.427372][ T165] FAT-fs (loop0): error, invalid FAT chain (i_pos 548, last_block 8) [ 36.439948][ T165] FAT-fs (loop0): Filesystem has been set read-only [ 36.440326][ T3822] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 36.448227][ T165] FAT-fs (loop0): error, corrupted file size (i_pos 548, 522) [ 36.458369][ T3814] EXT4-fs (loop3): 1 truncate cleaned up [ 36.468347][ T3825] netlink: 8 bytes leftover after parsing attributes in process `syz.1.107'. [ 36.482999][ T3822] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 36.488506][ T3814] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.515568][ T3814] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 36.524708][ T3814] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.551069][ T3832] FAULT_INJECTION: forcing a failure. [ 36.551069][ T3832] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 36.551097][ T3832] CPU: 1 UID: 0 PID: 3832 Comm: syz.2.114 Not tainted 6.13.0-syzkaller-09383-gebbb8be421ee #0 [ 36.551116][ T3832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 36.551126][ T3832] Call Trace: [ 36.551131][ T3832] [ 36.551165][ T3832] dump_stack_lvl+0xf2/0x150 [ 36.551192][ T3832] dump_stack+0x15/0x1a [ 36.551213][ T3832] should_fail_ex+0x24a/0x260 [ 36.551245][ T3832] should_fail+0xb/0x10 [ 36.551290][ T3832] should_fail_usercopy+0x1a/0x20 [ 36.551317][ T3832] _copy_from_user+0x1c/0xa0 [ 36.551392][ T3832] __sys_bpf+0x14e/0x7a0 [ 36.551425][ T3832] __x64_sys_bpf+0x43/0x50 [ 36.551448][ T3832] x64_sys_call+0x2914/0x2dc0 [ 36.551529][ T3832] do_syscall_64+0xc9/0x1c0 [ 36.551557][ T3832] ? clear_bhb_loop+0x55/0xb0 [ 36.551637][ T3832] ? clear_bhb_loop+0x55/0xb0 [ 36.551674][ T3832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.551745][ T3832] RIP: 0033:0x7ff26e83cda9 [ 36.551799][ T3832] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 36.551821][ T3832] RSP: 002b:00007ff26cea7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 36.551842][ T3832] RAX: ffffffffffffffda RBX: 00007ff26ea55fa0 RCX: 00007ff26e83cda9 [ 36.551857][ T3832] RDX: 0000000000000094 RSI: 0000000020002440 RDI: 0000000000000005 [ 36.551871][ T3832] RBP: 00007ff26cea7090 R08: 0000000000000000 R09: 0000000000000000 [ 36.551885][ T3832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 36.551900][ T3832] R13: 0000000000000000 R14: 00007ff26ea55fa0 R15: 00007fff18352e48 [ 36.551963][ T3832] [ 36.604962][ T3834] xt_TPROXY: Can be used only with -p tcp or -p udp [ 36.611591][ T3837] xt_TPROXY: Can be used only with -p tcp or -p udp [ 36.617731][ T3837] FAULT_INJECTION: forcing a failure. [ 36.617731][ T3837] name failslab, interval 1, probability 0, space 0, times 0 [ 36.786011][ T3837] CPU: 1 UID: 0 PID: 3837 Comm: syz.2.116 Not tainted 6.13.0-syzkaller-09383-gebbb8be421ee #0 [ 36.786031][ T3837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 36.786041][ T3837] Call Trace: [ 36.786047][ T3837] [ 36.786053][ T3837] dump_stack_lvl+0xf2/0x150 [ 36.786122][ T3837] dump_stack+0x15/0x1a [ 36.786139][ T3837] should_fail_ex+0x24a/0x260 [ 36.786181][ T3837] ? do_blk_trace_setup+0x11d/0x4d0 [ 36.786208][ T3837] should_failslab+0x8f/0xb0 [ 36.786230][ T3837] __kmalloc_cache_noprof+0x4e/0x320 [ 36.786262][ T3837] do_blk_trace_setup+0x11d/0x4d0 [ 36.786296][ T3837] blk_trace_setup+0xa7/0x140 [ 36.786321][ T3837] blk_trace_ioctl+0xea/0x2e0 [ 36.786416][ T3837] ? do_vfs_ioctl+0x96e/0x1530 [ 36.786497][ T3837] ? selinux_file_ioctl+0x2f7/0x380 [ 36.786588][ T3837] blkdev_ioctl+0x281/0x450 [ 36.786615][ T3837] ? __pfx_blkdev_ioctl+0x10/0x10 [ 36.786636][ T3837] __se_sys_ioctl+0xc9/0x140 [ 36.786721][ T3837] __x64_sys_ioctl+0x43/0x50 [ 36.786741][ T3837] x64_sys_call+0x1690/0x2dc0 [ 36.786817][ T3837] do_syscall_64+0xc9/0x1c0 [ 36.786848][ T3837] ? clear_bhb_loop+0x55/0xb0 [ 36.786891][ T3837] ? clear_bhb_loop+0x55/0xb0 [ 36.786997][ T3837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.787026][ T3837] RIP: 0033:0x7ff26e83cda9 [ 36.787042][ T3837] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 36.787060][ T3837] RSP: 002b:00007ff26cea7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 36.787091][ T3837] RAX: ffffffffffffffda RBX: 00007ff26ea55fa0 RCX: 00007ff26e83cda9 [ 36.787103][ T3837] RDX: 0000000020000000 RSI: 00000000c0481273 RDI: 0000000000000006 [ 36.787124][ T3837] RBP: 00007ff26cea7090 R08: 0000000000000000 R09: 0000000000000000 [ 36.787137][ T3837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 36.787149][ T3837] R13: 0000000000000000 R14: 00007ff26ea55fa0 R15: 00007fff18352e48 [ 36.787238][ T3837] [ 36.939665][ T3853] loop2: detected capacity change from 0 to 128 [ 36.989851][ T3860] netlink: 8 bytes leftover after parsing attributes in process `syz.0.124'. [ 37.138309][ T3864] loop1: detected capacity change from 0 to 512 [ 37.148006][ T3864] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.125: bg 0: block 35: padding at end of block bitmap is not set [ 37.169512][ T3869] loop0: detected capacity change from 0 to 1024 [ 37.169768][ T3864] EXT4-fs (loop1): Remounting filesystem read-only [ 37.182748][ T3864] EXT4-fs (loop1): 1 truncate cleaned up [ 37.188900][ T3864] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.200999][ T3864] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 37.205106][ T3869] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.207934][ T3864] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.226228][ T3869] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 37.251209][ T3869] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 37.263593][ T3869] EXT4-fs (loop0): This should not happen!! Data will be lost [ 37.263593][ T3869] [ 37.273358][ T3869] EXT4-fs (loop0): Total free blocks count 0 [ 37.279451][ T3869] EXT4-fs (loop0): Free/Dirty block details [ 37.285415][ T3869] EXT4-fs (loop0): free_blocks=68451041280 [ 37.291329][ T3869] EXT4-fs (loop0): dirty_blocks=64 [ 37.296450][ T3869] EXT4-fs (loop0): Block reservation details [ 37.302431][ T3869] EXT4-fs (loop0): i_reserved_data_blocks=4 [ 37.308582][ T3873] FAULT_INJECTION: forcing a failure. [ 37.308582][ T3873] name failslab, interval 1, probability 0, space 0, times 0 [ 37.308734][ T3869] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 37.321229][ T3873] CPU: 1 UID: 0 PID: 3873 Comm: syz.1.128 Not tainted 6.13.0-syzkaller-09383-gebbb8be421ee #0 [ 37.321256][ T3873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 37.321269][ T3873] Call Trace: [ 37.321301][ T3873] [ 37.321309][ T3873] dump_stack_lvl+0xf2/0x150 [ 37.321336][ T3873] dump_stack+0x15/0x1a [ 37.321358][ T3873] should_fail_ex+0x24a/0x260 [ 37.321407][ T3873] should_failslab+0x8f/0xb0 [ 37.321433][ T3873] __kmalloc_noprof+0xab/0x3f0 [ 37.321466][ T3873] ? unregister_netdevice_many_notify+0x325/0x1360 [ 37.321546][ T3873] ? unlist_netdevice+0x2cb/0x320 [ 37.321579][ T3873] unregister_netdevice_many_notify+0x325/0x1360 [ 37.321699][ T3873] ? queue_delayed_work_on+0x107/0x190 [ 37.321734][ T3873] unregister_netdevice_queue+0x1f4/0x220 [ 37.321828][ T3873] __tun_detach+0x7db/0xae0 [ 37.321856][ T3873] tun_chr_close+0x58/0xf0 [ 37.321894][ T3873] ? __pfx_tun_chr_close+0x10/0x10 [ 37.322002][ T3873] __fput+0x2ac/0x640 [ 37.322042][ T3873] __fput_sync+0x96/0xc0 [ 37.322138][ T3873] __x64_sys_close+0x55/0xe0 [ 37.322177][ T3873] x64_sys_call+0x266c/0x2dc0 [ 37.322215][ T3873] do_syscall_64+0xc9/0x1c0 [ 37.322250][ T3873] ? clear_bhb_loop+0x55/0xb0 [ 37.322401][ T3873] ? clear_bhb_loop+0x55/0xb0 [ 37.322434][ T3873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.322493][ T3873] RIP: 0033:0x7f4225a4cda9 [ 37.322512][ T3873] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 37.322533][ T3873] RSP: 002b:00007f42240b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 37.322555][ T3873] RAX: ffffffffffffffda RBX: 00007f4225c65fa0 RCX: 00007f4225a4cda9 [ 37.322570][ T3873] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 37.322584][ T3873] RBP: 00007f42240b1090 R08: 0000000000000000 R09: 0000000000000000 [ 37.322598][ T3873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 37.322612][ T3873] R13: 0000000000000000 R14: 00007f4225c65fa0 R15: 00007ffd13626cc8 [ 37.322634][ T3873] [ 37.562717][ T3875] FAULT_INJECTION: forcing a failure. [ 37.562717][ T3875] name failslab, interval 1, probability 0, space 0, times 0 [ 37.575471][ T3875] CPU: 0 UID: 0 PID: 3875 Comm: syz.4.129 Not tainted 6.13.0-syzkaller-09383-gebbb8be421ee #0 [ 37.575513][ T3875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 37.575522][ T3875] Call Trace: [ 37.575527][ T3875] [ 37.575531][ T3875] dump_stack_lvl+0xf2/0x150 [ 37.575552][ T3875] dump_stack+0x15/0x1a [ 37.575568][ T3875] should_fail_ex+0x24a/0x260 [ 37.575592][ T3875] should_failslab+0x8f/0xb0 [ 37.575652][ T3875] kmem_cache_alloc_node_noprof+0x59/0x320 [ 37.575688][ T3875] ? __alloc_skb+0x10b/0x310 [ 37.575710][ T3875] __alloc_skb+0x10b/0x310 [ 37.575729][ T3875] ? audit_log_start+0x34c/0x6b0 [ 37.575770][ T3875] audit_log_start+0x368/0x6b0 [ 37.575809][ T3875] audit_seccomp+0x4b/0x130 [ 37.575830][ T3875] __seccomp_filter+0x6fa/0x1180 [ 37.575917][ T3875] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 37.575936][ T3875] ? vfs_write+0x644/0x920 [ 37.575955][ T3875] __secure_computing+0x9f/0x1c0 [ 37.575971][ T3875] syscall_trace_enter+0xd1/0x1f0 [ 37.575987][ T3875] ? fpregs_assert_state_consistent+0x83/0xa0 [ 37.576110][ T3875] do_syscall_64+0xaa/0x1c0 [ 37.576131][ T3875] ? clear_bhb_loop+0x55/0xb0 [ 37.576171][ T3875] ? clear_bhb_loop+0x55/0xb0 [ 37.576242][ T3875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.576261][ T3875] RIP: 0033:0x7fa8992fcda9 [ 37.576272][ T3875] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 37.576284][ T3875] RSP: 002b:00007fa897961038 EFLAGS: 00000246 ORIG_RAX: 000000000000006d [ 37.576361][ T3875] RAX: ffffffffffffffda RBX: 00007fa899515fa0 RCX: 00007fa8992fcda9 [ 37.576370][ T3875] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 37.576378][ T3875] RBP: 00007fa897961090 R08: 0000000000000000 R09: 0000000000000000 [ 37.576386][ T3875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 37.576394][ T3875] R13: 0000000000000000 R14: 00007fa899515fa0 R15: 00007ffe62057698 [ 37.576407][ T3875] [ 37.818617][ T3884] loop1: detected capacity change from 0 to 1024 [ 37.839036][ T50] FAT-fs (loop2): error, invalid FAT chain (i_pos 548, last_block 8) [ 37.847211][ T50] FAT-fs (loop2): Filesystem has been set read-only [ 37.858918][ T50] FAT-fs (loop2): error, corrupted file size (i_pos 548, 522) [ 37.867226][ T3884] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.871760][ T3890] loop3: detected capacity change from 0 to 1024 [ 37.891406][ T3892] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 37.928107][ T3890] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.956989][ T3897] mmap: syz.4.136 (3897): VmData 167489536 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 37.966297][ T50] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 38.002996][ T50] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 64 with error 28 [ 38.015356][ T50] EXT4-fs (loop1): This should not happen!! Data will be lost [ 38.015356][ T50] [ 38.015380][ T50] EXT4-fs (loop1): Total free blocks count 0 [ 38.015392][ T50] EXT4-fs (loop1): Free/Dirty block details [ 38.015476][ T50] EXT4-fs (loop1): free_blocks=68451041280 [ 38.015489][ T50] EXT4-fs (loop1): dirty_blocks=64 [ 38.015500][ T50] EXT4-fs (loop1): Block reservation details [ 38.015508][ T50] EXT4-fs (loop1): i_reserved_data_blocks=4 [ 38.015848][ T2171] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 38.016131][ T2171] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 64 with error 28 [ 38.016168][ T2171] EXT4-fs (loop3): This should not happen!! Data will be lost [ 38.016168][ T2171] [ 38.016189][ T2171] EXT4-fs (loop3): Total free blocks count 0 [ 38.016201][ T2171] EXT4-fs (loop3): Free/Dirty block details [ 38.016212][ T2171] EXT4-fs (loop3): free_blocks=68451041280 [ 38.016224][ T2171] EXT4-fs (loop3): dirty_blocks=64 [ 38.016278][ T2171] EXT4-fs (loop3): Block reservation details [ 38.016287][ T2171] EXT4-fs (loop3): i_reserved_data_blocks=4 [ 38.016989][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.029806][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.157035][ T3908] netlink: 8 bytes leftover after parsing attributes in process `syz.0.137'. [ 38.160077][ T3906] loop1: detected capacity change from 0 to 512 [ 38.174788][ T3906] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.138: bg 0: block 35: padding at end of block bitmap is not set [ 38.189840][ T3906] EXT4-fs (loop1): Remounting filesystem read-only [ 38.196693][ T3906] EXT4-fs (loop1): 1 truncate cleaned up [ 38.203044][ T3906] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.219967][ T3906] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 38.229687][ T3906] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.249194][ T3911] loop3: detected capacity change from 0 to 1024 [ 38.266253][ T3914] loop4: detected capacity change from 0 to 512 [ 38.272742][ T3914] EXT4-fs: Ignoring removed nobh option [ 38.285010][ T3914] ext4: Bad value for 'dax' [ 38.311676][ T3911] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 38.340702][ T3911] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.140: Invalid block bitmap block 0 in block_group 0 [ 38.359857][ T3918] loop1: detected capacity change from 0 to 128 [ 38.368227][ T3911] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.140: Failed to acquire dquot type 0 [ 38.384422][ T3911] EXT4-fs error (device loop3): ext4_free_blocks:6589: comm syz.3.140: Freeing blocks not in datazone - block = 0, count = 4096 [ 38.440880][ T3911] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.140: Invalid inode bitmap blk 0 in block_group 0 [ 38.466625][ T50] EXT4-fs error (device loop3): ext4_release_dquot:6950: comm kworker/u8:3: Failed to release dquot type 0 [ 38.493968][ T3931] FAULT_INJECTION: forcing a failure. [ 38.493968][ T3931] name failslab, interval 1, probability 0, space 0, times 0 [ 38.494299][ T3929] loop0: detected capacity change from 0 to 1024 [ 38.506581][ T3931] CPU: 1 UID: 0 PID: 3931 Comm: syz.4.147 Not tainted 6.13.0-syzkaller-09383-gebbb8be421ee #0 [ 38.506605][ T3931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 38.506617][ T3931] Call Trace: [ 38.506674][ T3931] [ 38.506682][ T3931] dump_stack_lvl+0xf2/0x150 [ 38.506761][ T3931] dump_stack+0x15/0x1a [ 38.506798][ T3931] should_fail_ex+0x24a/0x260 [ 38.506843][ T3931] should_failslab+0x8f/0xb0 [ 38.506870][ T3931] kmem_cache_alloc_node_noprof+0x59/0x320 [ 38.506905][ T3931] ? __alloc_skb+0x10b/0x310 [ 38.506936][ T3931] __alloc_skb+0x10b/0x310 [ 38.507064][ T3931] netlink_alloc_large_skb+0xad/0xe0 [ 38.507122][ T3931] netlink_sendmsg+0x3b4/0x6e0 [ 38.507157][ T3931] ? __pfx_netlink_sendmsg+0x10/0x10 [ 38.507179][ T3931] __sock_sendmsg+0x140/0x180 [ 38.507204][ T3931] ____sys_sendmsg+0x312/0x410 [ 38.507309][ T3931] __sys_sendmsg+0x19d/0x230 [ 38.507356][ T3931] __x64_sys_sendmsg+0x46/0x50 [ 38.507392][ T3931] x64_sys_call+0x2734/0x2dc0 [ 38.507420][ T3931] do_syscall_64+0xc9/0x1c0 [ 38.507487][ T3931] ? clear_bhb_loop+0x55/0xb0 [ 38.507515][ T3931] ? clear_bhb_loop+0x55/0xb0 [ 38.507573][ T3931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.507600][ T3931] RIP: 0033:0x7fa8992fcda9 [ 38.507615][ T3931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 38.507634][ T3931] RSP: 002b:00007fa897961038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 38.507728][ T3931] RAX: ffffffffffffffda RBX: 00007fa899515fa0 RCX: 00007fa8992fcda9 [ 38.507741][ T3931] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 38.507753][ T3931] RBP: 00007fa897961090 R08: 0000000000000000 R09: 0000000000000000 [ 38.507765][ T3931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 38.507777][ T3931] R13: 0000000000000000 R14: 00007fa899515fa0 R15: 00007ffe62057698 [ 38.507794][ T3931] [ 38.534079][ T3911] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 38.613387][ T3936] loop4: detected capacity change from 0 to 164 [ 38.617431][ T3911] EXT4-fs (loop3): 1 orphan inode deleted [ 38.625819][ T3936] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 38.631967][ T3911] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.644392][ T3936] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 38.764202][ T3929] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.814844][ T3911] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 38.868936][ T11] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 38.891853][ T11] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 64 with error 28 [ 38.904253][ T11] EXT4-fs (loop0): This should not happen!! Data will be lost [ 38.904253][ T11] [ 38.914072][ T11] EXT4-fs (loop0): Total free blocks count 0 [ 38.920052][ T11] EXT4-fs (loop0): Free/Dirty block details [ 38.926093][ T11] EXT4-fs (loop0): free_blocks=68451041280 [ 38.931898][ T11] EXT4-fs (loop0): dirty_blocks=64 [ 38.937041][ T11] EXT4-fs (loop0): Block reservation details [ 38.943173][ T11] EXT4-fs (loop0): i_reserved_data_blocks=4 [ 38.964768][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.982873][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.028801][ T3949] loop0: detected capacity change from 0 to 512 [ 39.041440][ T3949] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.153: bg 0: block 35: padding at end of block bitmap is not set [ 39.062459][ T3954] netlink: 8 bytes leftover after parsing attributes in process `syz.4.156'. [ 39.071593][ T3949] EXT4-fs (loop0): Remounting filesystem read-only [ 39.078271][ T3949] EXT4-fs (loop0): 1 truncate cleaned up [ 39.084548][ T3949] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.085679][ T3954] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 39.096737][ T3949] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 39.113389][ T3949] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.123095][ T3956] FAULT_INJECTION: forcing a failure. [ 39.123095][ T3956] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 39.136227][ T3956] CPU: 0 UID: 0 PID: 3956 Comm: syz.2.155 Not tainted 6.13.0-syzkaller-09383-gebbb8be421ee #0 [ 39.136251][ T3956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 39.136340][ T3956] Call Trace: [ 39.136346][ T3956] [ 39.136353][ T3956] dump_stack_lvl+0xf2/0x150 [ 39.136445][ T3956] dump_stack+0x15/0x1a [ 39.136522][ T3956] should_fail_ex+0x24a/0x260 [ 39.136554][ T3956] should_fail+0xb/0x10 [ 39.136623][ T3956] should_fail_usercopy+0x1a/0x20 [ 39.136651][ T3956] strncpy_from_user+0x25/0x210 [ 39.136739][ T3956] ? kmem_cache_alloc_noprof+0x18e/0x320 [ 39.136767][ T3956] ? getname_flags+0x81/0x3b0 [ 39.136833][ T3956] getname_flags+0xb0/0x3b0 [ 39.136857][ T3956] user_path_at+0x26/0x120 [ 39.136872][ T3956] do_faccessat+0x35b/0x680 [ 39.136931][ T3956] ? ksys_write+0x176/0x1b0 [ 39.136949][ T3956] __x64_sys_faccessat2+0x51/0x60 [ 39.136970][ T3956] x64_sys_call+0x15bc/0x2dc0 [ 39.136991][ T3956] do_syscall_64+0xc9/0x1c0 [ 39.137068][ T3956] ? clear_bhb_loop+0x55/0xb0 [ 39.137092][ T3956] ? clear_bhb_loop+0x55/0xb0 [ 39.137114][ T3956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.137228][ T3956] RIP: 0033:0x7ff26e83cda9 [ 39.137240][ T3956] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 39.137254][ T3956] RSP: 002b:00007ff26ce86038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b7 [ 39.137293][ T3956] RAX: ffffffffffffffda RBX: 00007ff26ea56080 RCX: 00007ff26e83cda9 [ 39.137303][ T3956] RDX: 0000000000000001 RSI: 0000000020000880 RDI: 0000000000000007 [ 39.137312][ T3956] RBP: 00007ff26ce86090 R08: 0000000000000000 R09: 0000000000000000 [ 39.137383][ T3956] R10: 0000000000001100 R11: 0000000000000246 R12: 0000000000000001 [ 39.137393][ T3956] R13: 0000000000000000 R14: 00007ff26ea56080 R15: 00007fff18352e48 [ 39.137407][ T3956] [ 39.164985][ T3954] tipc: Started in network mode [ 39.193395][ T3959] loop0: detected capacity change from 0 to 164 [ 39.197437][ T3954] tipc: Node identity ac14140f, cluster identity 4711 [ 39.226235][ T3959] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 39.246718][ T3954] tipc: New replicast peer: 255.255.255.255 [ 39.259990][ T3959] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 39.279443][ T3954] tipc: Enabled bearer , priority 10 [ 39.380566][ T3963] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 39.388049][ T3963] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 39.400079][ T3963] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 39.403346][ T3403] FAT-fs (loop1): error, invalid FAT chain (i_pos 548, last_block 8) [ 39.407554][ T3963] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 39.415577][ T3403] FAT-fs (loop1): Filesystem has been set read-only [ 39.441517][ T3403] FAT-fs (loop1): error, corrupted file size (i_pos 548, 522) [ 39.460349][ T3970] FAULT_INJECTION: forcing a failure. [ 39.460349][ T3970] name failslab, interval 1, probability 0, space 0, times 0 [ 39.469279][ T3972] loop1: detected capacity change from 0 to 164 [ 39.473144][ T3970] CPU: 1 UID: 0 PID: 3970 Comm: syz.4.162 Not tainted 6.13.0-syzkaller-09383-gebbb8be421ee #0 [ 39.473170][ T3970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 39.473244][ T3970] Call Trace: [ 39.473250][ T3970] [ 39.473257][ T3970] dump_stack_lvl+0xf2/0x150 [ 39.473284][ T3970] dump_stack+0x15/0x1a [ 39.473306][ T3970] should_fail_ex+0x24a/0x260 [ 39.473358][ T3970] should_failslab+0x8f/0xb0 [ 39.473385][ T3970] kmem_cache_alloc_node_noprof+0x59/0x320 [ 39.473420][ T3970] ? __alloc_skb+0x10b/0x310 [ 39.473493][ T3970] __alloc_skb+0x10b/0x310 [ 39.473554][ T3970] netlink_alloc_large_skb+0xad/0xe0 [ 39.473590][ T3970] netlink_sendmsg+0x3b4/0x6e0 [ 39.473616][ T3970] ? __pfx_netlink_sendmsg+0x10/0x10 [ 39.473675][ T3970] __sock_sendmsg+0x140/0x180 [ 39.473700][ T3970] ____sys_sendmsg+0x312/0x410 [ 39.473737][ T3970] __sys_sendmsg+0x19d/0x230 [ 39.473784][ T3970] __x64_sys_sendmsg+0x46/0x50 [ 39.473830][ T3970] x64_sys_call+0x2734/0x2dc0 [ 39.473947][ T3970] do_syscall_64+0xc9/0x1c0 [ 39.473995][ T3970] ? clear_bhb_loop+0x55/0xb0 [ 39.474063][ T3970] ? clear_bhb_loop+0x55/0xb0 [ 39.474094][ T3970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.474125][ T3970] RIP: 0033:0x7fa8992fcda9 [ 39.474142][ T3970] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 39.474163][ T3970] RSP: 002b:00007fa897961038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 39.474185][ T3970] RAX: ffffffffffffffda RBX: 00007fa899515fa0 RCX: 00007fa8992fcda9 [ 39.474202][ T3970] RDX: 0000000000000000 RSI: 0000000020000480 RDI: 0000000000000004 [ 39.474216][ T3970] RBP: 00007fa897961090 R08: 0000000000000000 R09: 0000000000000000 [ 39.474230][ T3970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 39.474244][ T3970] R13: 0000000000000000 R14: 00007fa899515fa0 R15: 00007ffe62057698 [ 39.474265][ T3970] [ 39.475806][ T3970] tipc: Enabling of bearer rejected, already enabled [ 39.530471][ T3972] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 39.648914][ T3979] netlink: 8 bytes leftover after parsing attributes in process `syz.4.164'. [ 39.659820][ T3972] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 39.664981][ T3979] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 39.716839][ T3982] tipc: Enabled bearer , priority 10 [ 39.731101][ T3984] loop1: detected capacity change from 0 to 512 [ 39.745060][ T3984] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.167: bg 0: block 35: padding at end of block bitmap is not set [ 39.772921][ T29] kauditd_printk_skb: 168 callbacks suppressed [ 39.772943][ T29] audit: type=1326 audit(1738202785.588:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3980 comm="syz.0.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd94d48cda9 code=0x7ffc0000 [ 39.782462][ T3984] EXT4-fs (loop1): Remounting filesystem read-only [ 39.804530][ T29] audit: type=1326 audit(1738202785.588:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3980 comm="syz.0.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd94d48cda9 code=0x7ffc0000 [ 39.832578][ T3984] EXT4-fs (loop1): 1 truncate cleaned up [ 39.832924][ T3984] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.833026][ T3984] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 39.833388][ T3984] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.889150][ T29] audit: type=1400 audit(1738202785.708:739): avc: denied { getopt } for pid=3988 comm="syz.3.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 39.958403][ T4003] netlink: 8 bytes leftover after parsing attributes in process `syz.1.171'. [ 39.962382][ T29] audit: type=1400 audit(1738202785.768:740): avc: denied { setopt } for pid=3999 comm="syz.3.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 40.005335][ T29] audit: type=1400 audit(1738202785.818:741): avc: denied { read } for pid=4001 comm="syz.4.174" name="ptp0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 40.028164][ T29] audit: type=1400 audit(1738202785.818:742): avc: denied { open } for pid=4001 comm="syz.4.174" path="/dev/ptp0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 40.048357][ T4006] capability: warning: `syz.1.175' uses 32-bit capabilities (legacy support in use) [ 40.051439][ T29] audit: type=1400 audit(1738202785.828:743): avc: denied { ioctl } for pid=4001 comm="syz.4.174" path="/dev/ptp0" dev="devtmpfs" ino=245 ioctlcmd=0x3d05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 40.118822][ T4007] loop3: detected capacity change from 0 to 512 [ 40.135944][ T29] audit: type=1400 audit(1738202785.958:744): avc: denied { map } for pid=4009 comm="syz.4.177" path="socket:[5815]" dev="sockfs" ino=5815 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 40.159105][ T29] audit: type=1400 audit(1738202785.958:745): avc: denied { read accept } for pid=4009 comm="syz.4.177" path="socket:[5815]" dev="sockfs" ino=5815 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 40.182912][ T29] audit: type=1400 audit(1738202785.958:746): avc: denied { listen } for pid=4009 comm="syz.4.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 40.213189][ T4007] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 40.224950][ T4007] EXT4-fs (loop3): orphan cleanup on readonly fs [ 40.231589][ T4007] EXT4-fs warning (device loop3): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 40.234363][ T4019] loop4: detected capacity change from 0 to 512 [ 40.247883][ T4007] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 40.260831][ T4007] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.173: bg 0: block 40: padding at end of block bitmap is not set [ 40.286566][ T4007] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 40.296150][ T4007] EXT4-fs (loop3): 1 truncate cleaned up [ 40.303896][ T4007] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 40.396674][ T4000] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #16: comm syz.3.173: corrupted xattr block 31: invalid header [ 40.410117][ T4000] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=16 [ 40.460266][ T4026] ebt_among: src integrity fail: 300 [ 40.468987][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.506748][ T4031] loop3: detected capacity change from 0 to 512 [ 40.515260][ T4031] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.182: bg 0: block 35: padding at end of block bitmap is not set [ 40.533125][ T4019] loop4: detected capacity change from 0 to 512 [ 40.534735][ T4034] loop1: detected capacity change from 0 to 1024 [ 40.547084][ T4031] EXT4-fs (loop3): Remounting filesystem read-only [ 40.553932][ T4031] EXT4-fs (loop3): 1 truncate cleaned up [ 40.560450][ T4031] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.572446][ T4034] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.577922][ T4034] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 40.585953][ T4031] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 40.600584][ T4034] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 40.608704][ T4031] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.618751][ T4034] EXT4-fs (loop1): This should not happen!! Data will be lost [ 40.618751][ T4034] [ 40.618767][ T4034] EXT4-fs (loop1): Total free blocks count 0 [ 40.618779][ T4034] EXT4-fs (loop1): Free/Dirty block details [ 40.618789][ T4034] EXT4-fs (loop1): free_blocks=68451041280 [ 40.618798][ T4034] EXT4-fs (loop1): dirty_blocks=64 [ 40.618808][ T4034] EXT4-fs (loop1): Block reservation details [ 40.618816][ T4034] EXT4-fs (loop1): i_reserved_data_blocks=4 [ 40.618995][ T4034] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 40.628944][ T4019] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 40.719632][ T4019] EXT4-fs (loop4): orphan cleanup on readonly fs [ 40.722509][ T4043] loop3: detected capacity change from 0 to 512 [ 40.731107][ T4019] EXT4-fs warning (device loop4): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 40.747356][ T4019] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 40.754535][ T4019] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.178: bg 0: block 40: padding at end of block bitmap is not set [ 40.768940][ T4019] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 40.769525][ T4043] EXT4-fs (loop3): failed to initialize system zone (-117) [ 40.785920][ T4043] EXT4-fs (loop3): mount failed [ 40.797403][ T4019] EXT4-fs (loop4): 1 truncate cleaned up [ 40.813793][ T4019] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 40.829584][ T4049] loop0: detected capacity change from 0 to 512 [ 40.835873][ T8] tipc: Node number set to 2886997007 [ 40.845512][ T4049] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 40.864965][ T4049] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.187: invalid indirect mapped block 2683928664 (level 1) [ 40.884231][ T4049] EXT4-fs (loop0): Remounting filesystem read-only [ 40.902542][ T4049] EXT4-fs (loop0): 1 truncate cleaned up [ 40.928857][ T4049] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.949961][ T4058] loop1: detected capacity change from 0 to 1024 [ 40.951129][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.957190][ T4049] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 40.972092][ T4058] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 40.995978][ T4049] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.009919][ T4058] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.190: Invalid block bitmap block 0 in block_group 0 [ 41.032398][ T4063] loop2: detected capacity change from 0 to 512 [ 41.039052][ T4063] EXT4-fs: Ignoring removed nomblk_io_submit option [ 41.042238][ T4049] FAULT_INJECTION: forcing a failure. [ 41.042238][ T4049] name failslab, interval 1, probability 0, space 0, times 0 [ 41.058331][ T4049] CPU: 1 UID: 0 PID: 4049 Comm: syz.0.187 Not tainted 6.13.0-syzkaller-09383-gebbb8be421ee #0 [ 41.058359][ T4049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 41.058373][ T4049] Call Trace: [ 41.058379][ T4049] [ 41.058387][ T4049] dump_stack_lvl+0xf2/0x150 [ 41.058417][ T4049] dump_stack+0x15/0x1a [ 41.058492][ T4049] should_fail_ex+0x24a/0x260 [ 41.058531][ T4049] should_failslab+0x8f/0xb0 [ 41.058561][ T4049] kmem_cache_alloc_node_noprof+0x59/0x320 [ 41.058602][ T4049] ? __alloc_skb+0x10b/0x310 [ 41.058642][ T4049] __alloc_skb+0x10b/0x310 [ 41.058737][ T4049] ? audit_log_start+0x34c/0x6b0 [ 41.058775][ T4049] audit_log_start+0x368/0x6b0 [ 41.058884][ T4049] ? kmem_cache_free+0xdc/0x2d0 [ 41.058964][ T4049] audit_seccomp+0x4b/0x130 [ 41.058991][ T4049] __seccomp_filter+0x6fa/0x1180 [ 41.059012][ T4049] ? __perf_event_task_sched_out+0x138/0x1010 [ 41.059036][ T4049] ? __dequeue_entity+0x22/0x310 [ 41.059173][ T4049] __secure_computing+0x9f/0x1c0 [ 41.059193][ T4049] syscall_trace_enter+0xd1/0x1f0 [ 41.059216][ T4049] do_syscall_64+0xaa/0x1c0 [ 41.059274][ T4049] ? clear_bhb_loop+0x55/0xb0 [ 41.059303][ T4049] ? clear_bhb_loop+0x55/0xb0 [ 41.059330][ T4049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.059413][ T4049] RIP: 0033:0x7fd94d48b7bc [ 41.059426][ T4049] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 41.059444][ T4049] RSP: 002b:00007fd94baf7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 41.059462][ T4049] RAX: ffffffffffffffda RBX: 00007fd94d6a5fa0 RCX: 00007fd94d48b7bc [ 41.059521][ T4049] RDX: 000000000000000f RSI: 00007fd94baf70a0 RDI: 0000000000000003 [ 41.059531][ T4049] RBP: 00007fd94baf7090 R08: 0000000000000000 R09: 0000000000000000 [ 41.059540][ T4049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 41.059549][ T4049] R13: 0000000000000000 R14: 00007fd94d6a5fa0 R15: 00007ffe9fe76968 [ 41.059563][ T4049] [ 41.061331][ T4058] EXT4-fs error (device loop1): ext4_acquire_dquot:6927: comm syz.1.190: Failed to acquire dquot type 0 [ 41.073704][ T4063] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 41.103233][ T4067] loop4: detected capacity change from 0 to 1024 [ 41.116667][ T4058] EXT4-fs error (device loop1): ext4_free_blocks:6589: comm syz.1.190: Freeing blocks not in datazone - block = 0, count = 4096 [ 41.125705][ T4071] loop0: detected capacity change from 0 to 512 [ 41.126559][ T4067] EXT4-fs: Ignoring removed mblk_io_submit option [ 41.131035][ T4058] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.190: Invalid inode bitmap blk 0 in block_group 0 [ 41.143564][ T4063] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 41.150409][ T40] EXT4-fs error (device loop1): ext4_release_dquot:6950: comm kworker/u8:2: Failed to release dquot type 0 [ 41.155556][ T4063] EXT4-fs (loop2): 1 truncate cleaned up [ 41.158137][ T4058] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 41.161364][ T4063] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.166962][ T4058] EXT4-fs (loop1): 1 orphan inode deleted [ 41.173831][ T4071] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.196: bg 0: block 35: padding at end of block bitmap is not set [ 41.179216][ T4058] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.180089][ T4071] EXT4-fs (loop0): Remounting filesystem read-only [ 41.187253][ T4063] EXT4-fs error (device loop2): ext4_map_blocks:671: inode #2: block 4: comm syz.2.194: lblock 0 mapped to illegal pblock 4 (length 1) [ 41.190395][ T4071] EXT4-fs (loop0): 1 truncate cleaned up [ 41.210936][ T4063] EXT4-fs (loop2): Remounting filesystem read-only [ 41.234087][ T4071] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.238075][ T4067] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.242451][ T4071] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 41.275429][ T4058] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 41.281235][ T4071] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.327170][ T4078] netlink: 28 bytes leftover after parsing attributes in process `syz.4.191'. [ 41.360084][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.371491][ T4078] netlink: 52 bytes leftover after parsing attributes in process `syz.4.191'. [ 41.527297][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.569600][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.582371][ T4088] loop0: detected capacity change from 0 to 512 [ 41.592958][ T4091] loop2: detected capacity change from 0 to 512 [ 41.642429][ T4098] loop4: detected capacity change from 0 to 128 [ 41.644790][ T4094] 9pnet: Could not find request transport: |»ˆrVìd0xffffffffffffffff [ 41.660495][ T4088] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.199: bg 0: block 248: padding at end of block bitmap is not set [ 41.661241][ T4091] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.201: bg 0: block 248: padding at end of block bitmap is not set [ 41.676462][ T4088] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.199: Failed to acquire dquot type 1 [ 41.689902][ T4091] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.201: Failed to acquire dquot type 1 [ 41.701557][ T4088] EXT4-fs (loop0): 1 truncate cleaned up [ 41.712550][ T4091] EXT4-fs (loop2): 1 truncate cleaned up [ 41.719950][ T4088] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.739910][ T4103] netem: change failed [ 41.741114][ T4091] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.744482][ T4088] ext4 filesystem being mounted at /35/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 41.756813][ T4091] ext4 filesystem being mounted at /35/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 41.774002][ T4088] syz.0.199 (4088) used greatest stack depth: 9272 bytes left [ 41.792948][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.802588][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.827556][ T4107] loop2: detected capacity change from 0 to 1024 [ 41.847564][ T4107] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.861974][ T4107] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 41.877770][ T4107] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 41.890001][ T4107] EXT4-fs (loop2): This should not happen!! Data will be lost [ 41.890001][ T4107] [ 41.899705][ T4107] EXT4-fs (loop2): Total free blocks count 0 [ 41.905849][ T4107] EXT4-fs (loop2): Free/Dirty block details [ 41.911880][ T4107] EXT4-fs (loop2): free_blocks=68451041280 [ 41.917743][ T4107] EXT4-fs (loop2): dirty_blocks=64 [ 41.922877][ T4107] EXT4-fs (loop2): Block reservation details [ 41.926331][ T4114] loop1: detected capacity change from 0 to 1024 [ 41.928981][ T4107] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 41.937536][ T4112] loop0: detected capacity change from 0 to 4096 [ 41.941745][ T4107] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 41.969074][ T4114] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 41.995646][ T4112] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.003996][ T4114] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.207: Invalid block bitmap block 0 in block_group 0 [ 42.021954][ T4114] EXT4-fs error (device loop1): ext4_acquire_dquot:6927: comm syz.1.207: Failed to acquire dquot type 0 [ 42.033402][ T4112] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 42.044143][ T4114] EXT4-fs error (device loop1): ext4_free_blocks:6589: comm syz.1.207: Freeing blocks not in datazone - block = 0, count = 4096 [ 42.078425][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.093787][ T4114] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.207: Invalid inode bitmap blk 0 in block_group 0 [ 42.113661][ T51] EXT4-fs error (device loop1): ext4_release_dquot:6950: comm kworker/u8:4: Failed to release dquot type 0 [ 42.148371][ T4114] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 42.160516][ T4114] EXT4-fs (loop1): 1 orphan inode deleted [ 42.176124][ T4126] loop0: detected capacity change from 0 to 1024 [ 42.183088][ T4114] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.196137][ T4126] EXT4-fs: Ignoring removed mblk_io_submit option [ 42.214682][ T4126] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.235911][ T4126] netlink: 28 bytes leftover after parsing attributes in process `syz.0.210'. [ 42.244905][ T4126] netlink: 52 bytes leftover after parsing attributes in process `syz.0.210'. [ 42.255741][ T4114] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 42.338339][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.348280][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.397750][ T4144] loop0: detected capacity change from 0 to 1024 [ 42.416700][ T4148] loop2: detected capacity change from 0 to 1024 [ 42.447098][ T4144] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.460047][ T4148] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.483967][ T51] FAT-fs (loop4): error, invalid FAT chain (i_pos 548, last_block 8) [ 42.492082][ T51] FAT-fs (loop4): Filesystem has been set read-only [ 42.501268][ T4148] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 42.520765][ T51] FAT-fs (loop4): error, corrupted file size (i_pos 548, 522) [ 42.528866][ T51] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 42.544043][ T51] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 64 with error 28 [ 42.551239][ T4148] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 42.556429][ T51] EXT4-fs (loop0): This should not happen!! Data will be lost [ 42.556429][ T51] [ 42.568552][ T4148] EXT4-fs (loop2): This should not happen!! Data will be lost [ 42.568552][ T4148] [ 42.568567][ T4148] EXT4-fs (loop2): Total free blocks count 0 [ 42.568580][ T4148] EXT4-fs (loop2): Free/Dirty block details [ 42.568591][ T4148] EXT4-fs (loop2): free_blocks=68451041280 [ 42.568603][ T4148] EXT4-fs (loop2): dirty_blocks=64 [ 42.568614][ T4148] EXT4-fs (loop2): Block reservation details [ 42.568625][ T4148] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 42.578358][ T51] EXT4-fs (loop0): Total free blocks count 0 [ 42.610728][ T4155] loop4: detected capacity change from 0 to 512 [ 42.611010][ T51] EXT4-fs (loop0): Free/Dirty block details [ 42.611023][ T51] EXT4-fs (loop0): free_blocks=68451041280 [ 42.611033][ T51] EXT4-fs (loop0): dirty_blocks=64 [ 42.611042][ T51] EXT4-fs (loop0): Block reservation details [ 42.611051][ T51] EXT4-fs (loop0): i_reserved_data_blocks=4 [ 42.646093][ T4148] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 42.649143][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.690059][ T4155] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 42.703781][ T4155] System zones: 0-2, 18-18, 34-35 [ 42.719853][ T4155] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.737932][ T4155] ext4 filesystem being mounted at /46/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 42.790995][ T4163] FAULT_INJECTION: forcing a failure. [ 42.790995][ T4163] name failslab, interval 1, probability 0, space 0, times 0 [ 42.803669][ T4163] CPU: 0 UID: 0 PID: 4163 Comm: syz.0.224 Not tainted 6.13.0-syzkaller-09383-gebbb8be421ee #0 [ 42.803688][ T4163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 42.803698][ T4163] Call Trace: [ 42.803703][ T4163] [ 42.803772][ T4163] dump_stack_lvl+0xf2/0x150 [ 42.803800][ T4163] dump_stack+0x15/0x1a [ 42.803819][ T4163] should_fail_ex+0x24a/0x260 [ 42.803892][ T4163] ? virtio_transport_do_socket_init+0x39/0x190 [ 42.803926][ T4163] should_failslab+0x8f/0xb0 [ 42.803949][ T4163] __kmalloc_cache_noprof+0x4e/0x320 [ 42.804041][ T4163] ? kfree+0xd8/0x2f0 [ 42.804069][ T4163] virtio_transport_do_socket_init+0x39/0x190 [ 42.804098][ T4163] vsock_assign_transport+0x3f9/0x470 [ 42.804244][ T4163] vsock_connect+0x3a3/0x800 [ 42.804273][ T4163] ? __pfx_autoremove_wake_function+0x10/0x10 [ 42.804341][ T4163] ? __pfx_vsock_connect+0x10/0x10 [ 42.804368][ T4163] __sys_connect+0x18f/0x1b0 [ 42.804395][ T4163] __x64_sys_connect+0x41/0x50 [ 42.804461][ T4163] x64_sys_call+0x22a7/0x2dc0 [ 42.804499][ T4163] do_syscall_64+0xc9/0x1c0 [ 42.804525][ T4163] ? clear_bhb_loop+0x55/0xb0 [ 42.804547][ T4163] ? clear_bhb_loop+0x55/0xb0 [ 42.804570][ T4163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.804591][ T4163] RIP: 0033:0x7fd94d48cda9 [ 42.804643][ T4163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 42.804659][ T4163] RSP: 002b:00007fd94baf7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 42.804677][ T4163] RAX: ffffffffffffffda RBX: 00007fd94d6a5fa0 RCX: 00007fd94d48cda9 [ 42.804690][ T4163] RDX: 0000000000000010 RSI: 0000000020000040 RDI: 0000000000000003 [ 42.804703][ T4163] RBP: 00007fd94baf7090 R08: 0000000000000000 R09: 0000000000000000 [ 42.804716][ T4163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 42.804728][ T4163] R13: 0000000000000000 R14: 00007fd94d6a5fa0 R15: 00007ffe9fe76968 [ 42.804745][ T4163] [ 43.006803][ T4175] loop2: detected capacity change from 0 to 1024 [ 43.022943][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.037849][ T4174] loop0: detected capacity change from 0 to 1024 [ 43.043253][ T4177] loop3: detected capacity change from 0 to 164 [ 43.045841][ T4174] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 43.062042][ T4177] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 43.071386][ T4174] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.229: Invalid block bitmap block 0 in block_group 0 [ 43.072676][ T4177] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 43.093670][ T4174] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.229: Failed to acquire dquot type 0 [ 43.106148][ T4175] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.126001][ T4183] loop4: detected capacity change from 0 to 128 [ 43.134991][ T4174] EXT4-fs error (device loop0): ext4_free_blocks:6589: comm syz.0.229: Freeing blocks not in datazone - block = 0, count = 4096 [ 43.165791][ T28] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 43.170747][ T4186] loop3: detected capacity change from 0 to 1024 [ 43.181574][ T28] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 64 with error 28 [ 43.199294][ T28] EXT4-fs (loop2): This should not happen!! Data will be lost [ 43.199294][ T28] [ 43.199378][ T4174] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.229: Invalid inode bitmap blk 0 in block_group 0 [ 43.208928][ T28] EXT4-fs (loop2): Total free blocks count 0 [ 43.208942][ T28] EXT4-fs (loop2): Free/Dirty block details [ 43.208953][ T28] EXT4-fs (loop2): free_blocks=68451041280 [ 43.208965][ T28] EXT4-fs (loop2): dirty_blocks=64 [ 43.208976][ T28] EXT4-fs (loop2): Block reservation details [ 43.209051][ T28] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 43.224684][ T4186] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.227796][ T2171] EXT4-fs error (device loop0): ext4_release_dquot:6950: comm kworker/u8:6: Failed to release dquot type 0 [ 43.239927][ T4186] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, [ 43.246690][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.250420][ T4186] block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 43.268576][ T4174] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 43.280089][ T4186] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 43.323991][ T4174] EXT4-fs (loop0): 1 orphan inode deleted [ 43.326626][ T4186] EXT4-fs (loop3): This should not happen!! Data will be lost [ 43.326626][ T4186] [ 43.338708][ T4174] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.342068][ T4186] EXT4-fs (loop3): Total free blocks count 0 [ 43.360456][ T4186] EXT4-fs (loop3): Free/Dirty block details [ 43.366389][ T4186] EXT4-fs (loop3): free_blocks=68451041280 [ 43.372205][ T4186] EXT4-fs (loop3): dirty_blocks=64 [ 43.377385][ T4186] EXT4-fs (loop3): Block reservation details [ 43.383357][ T4186] EXT4-fs (loop3): i_reserved_data_blocks=4 [ 43.389501][ T4186] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 43.427753][ T4195] FAULT_INJECTION: forcing a failure. [ 43.427753][ T4195] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 43.440854][ T4195] CPU: 1 UID: 0 PID: 4195 Comm: syz.2.236 Not tainted 6.13.0-syzkaller-09383-gebbb8be421ee #0 [ 43.440910][ T4195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 43.440921][ T4195] Call Trace: [ 43.440927][ T4195] [ 43.440933][ T4195] dump_stack_lvl+0xf2/0x150 [ 43.440961][ T4195] dump_stack+0x15/0x1a [ 43.441009][ T4195] should_fail_ex+0x24a/0x260 [ 43.441062][ T4195] should_fail+0xb/0x10 [ 43.441092][ T4195] should_fail_usercopy+0x1a/0x20 [ 43.441129][ T4195] _copy_from_user+0x1c/0xa0 [ 43.441155][ T4195] autofs_dev_ioctl+0xd6/0x660 [ 43.441188][ T4195] ? __pfx_autofs_dev_ioctl+0x10/0x10 [ 43.441219][ T4195] __se_sys_ioctl+0xc9/0x140 [ 43.441298][ T4195] __x64_sys_ioctl+0x43/0x50 [ 43.441322][ T4195] x64_sys_call+0x1690/0x2dc0 [ 43.441352][ T4195] do_syscall_64+0xc9/0x1c0 [ 43.441381][ T4195] ? clear_bhb_loop+0x55/0xb0 [ 43.441480][ T4195] ? clear_bhb_loop+0x55/0xb0 [ 43.441514][ T4195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.441547][ T4195] RIP: 0033:0x7ff26e83cda9 [ 43.441608][ T4195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 43.441625][ T4195] RSP: 002b:00007ff26cea7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 43.441649][ T4195] RAX: ffffffffffffffda RBX: 00007ff26ea55fa0 RCX: 00007ff26e83cda9 [ 43.441728][ T4195] RDX: 0000000020000240 RSI: 00000000c0189374 RDI: 0000000000000005 [ 43.441743][ T4195] RBP: 00007ff26cea7090 R08: 0000000000000000 R09: 0000000000000000 [ 43.441755][ T4195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 43.441766][ T4195] R13: 0000000000000000 R14: 00007ff26ea55fa0 R15: 00007fff18352e48 [ 43.441799][ T4195] [ 43.622933][ T4174] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 43.637099][ T4197] xt_hashlimit: max too large, truncated to 1048576 [ 43.643894][ T4200] loop2: detected capacity change from 0 to 512 [ 43.659127][ T4200] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 43.667725][ T4197] Cannot find set identified by id 0 to match [ 43.674799][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.679105][ T4200] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.697757][ T4197] netem: change failed [ 43.735648][ T4207] netlink: 'syz.3.238': attribute type 10 has an invalid length. [ 43.752385][ T4207] veth0_macvtap: left promiscuous mode [ 43.759830][ T4207] veth0_macvtap: entered promiscuous mode [ 43.766585][ T4207] team0: Device macvtap0 failed to register rx_handler [ 43.779878][ T4207] veth0_macvtap: left promiscuous mode [ 43.788912][ T4212] loop1: detected capacity change from 0 to 512 [ 43.800786][ T4212] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 43.843417][ T4214] loop0: detected capacity change from 0 to 1024 [ 43.850369][ T4214] EXT4-fs: Ignoring removed mblk_io_submit option [ 43.877957][ T4214] netlink: 28 bytes leftover after parsing attributes in process `syz.0.242'. [ 43.886896][ T4214] netlink: 44 bytes leftover after parsing attributes in process `syz.0.242'. [ 43.936288][ T4227] loop2: detected capacity change from 0 to 1024 [ 43.984671][ T3296] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 43.999716][ T51] FAT-fs (loop4): error, invalid FAT chain (i_pos 548, last_block 8) [ 44.007842][ T51] FAT-fs (loop4): Filesystem has been set read-only [ 44.015524][ T2171] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 44.016504][ T51] FAT-fs (loop4): error, corrupted file size (i_pos 548, 522) [ 44.037728][ T2171] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 64 with error 28 [ 44.050236][ T2171] EXT4-fs (loop2): This should not happen!! Data will be lost [ 44.050236][ T2171] [ 44.059891][ T2171] EXT4-fs (loop2): Total free blocks count 0 [ 44.065901][ T2171] EXT4-fs (loop2): Free/Dirty block details [ 44.071818][ T2171] EXT4-fs (loop2): free_blocks=68451041280 [ 44.077666][ T2171] EXT4-fs (loop2): dirty_blocks=64 [ 44.082779][ T2171] EXT4-fs (loop2): Block reservation details [ 44.086463][ T4234] loop4: detected capacity change from 0 to 1024 [ 44.088858][ T2171] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 44.209746][ T4245] bridge0: entered promiscuous mode [ 44.226477][ T4245] macvlan2: entered promiscuous mode [ 44.245004][ T4251] netlink: 8 bytes leftover after parsing attributes in process `+|[@'. [ 44.245207][ T4245] bridge0: port 3(macvlan2) entered blocking state [ 44.259950][ T4245] bridge0: port 3(macvlan2) entered disabled state [ 44.267197][ T4245] macvlan2: entered allmulticast mode [ 44.272597][ T4245] bridge0: entered allmulticast mode [ 44.298124][ T4245] macvlan2: left allmulticast mode [ 44.303347][ T4245] bridge0: left allmulticast mode [ 44.319878][ T4245] bridge0: left promiscuous mode [ 44.329018][ T4253] loop4: detected capacity change from 0 to 4096 [ 44.361464][ T4253] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 44.429772][ T4261] loop2: detected capacity change from 0 to 1024 [ 44.446573][ T4261] EXT4-fs: Ignoring removed mblk_io_submit option [ 44.487722][ T4261] netlink: 28 bytes leftover after parsing attributes in process `syz.2.255'. [ 44.494870][ T4266] loop4: detected capacity change from 0 to 1024 [ 44.496745][ T4261] netlink: 44 bytes leftover after parsing attributes in process `syz.2.255'. [ 44.532335][ T4266] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 44.552758][ T4268] loop3: detected capacity change from 0 to 128 [ 44.586758][ T4266] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.256: Invalid block bitmap block 0 in block_group 0 [ 44.615321][ T4266] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.256: Failed to acquire dquot type 0 [ 44.642973][ T4275] loop2: detected capacity change from 0 to 512 [ 44.644161][ T4266] EXT4-fs error (device loop4): ext4_free_blocks:6589: comm syz.4.256: Freeing blocks not in datazone - block = 0, count = 4096 [ 44.663420][ T4266] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.256: Invalid inode bitmap blk 0 in block_group 0 [ 44.668826][ T4277] netlink: 8 bytes leftover after parsing attributes in process `syz.1.258'. [ 44.676193][ T51] EXT4-fs error (device loop4): ext4_release_dquot:6950: comm kworker/u8:4: Failed to release dquot type 0 [ 44.715865][ T4266] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 44.750711][ T4266] EXT4-fs (loop4): 1 orphan inode deleted [ 44.773995][ T29] kauditd_printk_skb: 184 callbacks suppressed [ 44.774050][ T29] audit: type=1326 audit(1738202790.598:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4265 comm="syz.4.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa8992fb710 code=0x7ffc0000 [ 44.805228][ T29] audit: type=1326 audit(1738202790.628:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4265 comm="syz.4.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fa8992fbaf7 code=0x7ffc0000 [ 44.828433][ T29] audit: type=1326 audit(1738202790.628:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4265 comm="syz.4.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa8992fb710 code=0x7ffc0000 [ 44.851728][ T29] audit: type=1326 audit(1738202790.628:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4265 comm="syz.4.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8992fcda9 code=0x7ffc0000 [ 44.874991][ T29] audit: type=1326 audit(1738202790.628:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4265 comm="syz.4.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8992fcda9 code=0x7ffc0000 [ 44.921222][ T4286] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 44.935801][ T29] audit: type=1326 audit(1738202790.708:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4265 comm="syz.4.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa8992fcda9 code=0x7ffc0000 [ 44.959123][ T29] audit: type=1326 audit(1738202790.708:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4265 comm="syz.4.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8992fcda9 code=0x7ffc0000 [ 44.982458][ T29] audit: type=1326 audit(1738202790.708:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4265 comm="syz.4.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8992fcda9 code=0x7ffc0000 [ 44.993143][ T4289] Illegal XDP return value 4294967274 on prog (id 190) dev N/A, expect packet loss! [ 45.005696][ T29] audit: type=1326 audit(1738202790.738:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4265 comm="syz.4.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7fa8992fcda9 code=0x7ffc0000 [ 45.038378][ T29] audit: type=1326 audit(1738202790.738:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4265 comm="syz.4.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8992fcda9 code=0x7ffc0000 [ 45.188802][ T4302] loop2: detected capacity change from 0 to 1024 [ 45.197921][ T4302] EXT4-fs: Ignoring removed mblk_io_submit option [ 45.284438][ T4313] loop2: detected capacity change from 0 to 1024 [ 45.315733][ T4313] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 45.334969][ T4313] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.271: Invalid block bitmap block 0 in block_group 0 [ 45.348467][ T4313] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.271: Failed to acquire dquot type 0 [ 45.368901][ T4313] EXT4-fs error (device loop2): ext4_free_blocks:6589: comm syz.2.271: Freeing blocks not in datazone - block = 0, count = 4096 [ 45.393019][ T4313] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.271: Invalid inode bitmap blk 0 in block_group 0 [ 45.407952][ T40] FAT-fs (loop3): error, invalid FAT chain (i_pos 548, last_block 8) [ 45.416053][ T40] FAT-fs (loop3): Filesystem has been set read-only [ 45.434066][ T40] FAT-fs (loop3): error, corrupted file size (i_pos 548, 522) [ 45.441764][ T28] EXT4-fs error (device loop2): ext4_release_dquot:6950: comm kworker/u8:1: Failed to release dquot type 0 [ 45.459371][ T4313] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 45.488181][ T4313] EXT4-fs (loop2): 1 orphan inode deleted [ 45.512718][ T4313] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 45.527767][ T4319] mmap: syz.3.273 (4319) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 45.604996][ T4321] loop2: detected capacity change from 0 to 1024 [ 45.614919][ T4321] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 45.652457][ T4323] xt_TPROXY: Can be used only with -p tcp or -p udp [ 45.669458][ T4321] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.274: Invalid block bitmap block 0 in block_group 0 [ 45.687969][ T4323] xt_CT: No such helper "snmp_trap" [ 45.693773][ T4321] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.274: Failed to acquire dquot type 0 [ 45.723734][ T4321] EXT4-fs error (device loop2): ext4_free_blocks:6589: comm syz.2.274: Freeing blocks not in datazone - block = 0, count = 4096 [ 45.737643][ T4321] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.274: Invalid inode bitmap blk 0 in block_group 0 [ 45.751261][ T28] EXT4-fs error (device loop2): ext4_release_dquot:6950: comm kworker/u8:1: Failed to release dquot type 0 [ 45.762828][ T4321] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 45.797812][ T4321] EXT4-fs (loop2): 1 orphan inode deleted [ 45.820768][ T4321] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 45.903358][ T4344] loop3: detected capacity change from 0 to 128 [ 45.910026][ T4344] ================================================================== [ 45.918114][ T4344] BUG: KCSAN: data-race in fsnotify_destroy_mark / inotify_handle_inode_event [ 45.926964][ T4344] [ 45.929285][ T4344] write to 0xffff88812784da44 of 4 bytes by task 3673 on cpu 1: [ 45.936913][ T4344] fsnotify_destroy_mark+0xe8/0x140 [ 45.942118][ T4344] __se_sys_inotify_rm_watch+0xea/0x170 [ 45.947685][ T4344] __x64_sys_inotify_rm_watch+0x31/0x40 [ 45.953321][ T4344] x64_sys_call+0x25e0/0x2dc0 [ 45.958093][ T4344] do_syscall_64+0xc9/0x1c0 [ 45.962628][ T4344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.968543][ T4344] [ 45.970859][ T4344] read to 0xffff88812784da44 of 4 bytes by task 4344 on cpu 0: [ 45.978395][ T4344] inotify_handle_inode_event+0x2d8/0x320 [ 45.984116][ T4344] fsnotify_handle_inode_event+0x1bd/0x220 [ 45.989933][ T4344] fsnotify+0x1187/0x1260 [ 45.994265][ T4344] __fsnotify_parent+0x2f5/0x340 [ 45.999206][ T4344] __fput+0x1e7/0x640 [ 46.003191][ T4344] __fput_sync+0x96/0xc0 [ 46.007435][ T4344] __x64_sys_close+0x55/0xe0 [ 46.012031][ T4344] x64_sys_call+0x266c/0x2dc0 [ 46.016714][ T4344] do_syscall_64+0xc9/0x1c0 [ 46.021231][ T4344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.027122][ T4344] [ 46.029434][ T4344] value changed: 0x00000001 -> 0x00000000 [ 46.035138][ T4344] [ 46.037449][ T4344] Reported by Kernel Concurrency Sanitizer on: [ 46.043584][ T4344] CPU: 0 UID: 0 PID: 4344 Comm: syz.3.282 Not tainted 6.13.0-syzkaller-09383-gebbb8be421ee #0 [ 46.053820][ T4344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 46.063869][ T4344] ================================================================== [ 46.076165][ T4339] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 46.095316][ T4347] loop0: detected capacity change from 0 to 164 [ 46.104257][ T4347] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 46.118696][ T4347] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 46.743507][ T51] FAT-fs (loop3): error, invalid FAT chain (i_pos 548, last_block 8) [ 46.751602][ T51] FAT-fs (loop3): Filesystem has been set read-only [ 46.758296][ T51] FAT-fs (loop3): error, corrupted file size (i_pos 548, 522)