last executing test programs: 4.310383124s ago: executing program 2 (id=1110): perf_event_open(&(0x7f0000001300)={0x5, 0x80, 0x5, 0x5, 0x3, 0x0, 0x0, 0x1, 0x40000, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x7, 0x1}, 0x6010, 0x100000001, 0xe4e520d, 0x4, 0x6, 0x8c9, 0x9, 0x0, 0x2, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x4) syz_read_part_table(0x60d, &(0x7f0000002240)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x82) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1}, &(0x7f0000000000), &(0x7f0000000200)=r0}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56d73, 0x2, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x41d}, @TCA_FQ_CODEL_QUANTUM={0x8}]}}]}, 0x48}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x90}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x210, 0x9e46, &(0x7f00000006c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mincore(&(0x7f0000ffb000/0x3000)=nil, 0x3000, &(0x7f0000001040)=""/4111) r8 = open(&(0x7f0000000080)='./bus\x00', 0x147842, 0x1) preadv2(r8, &(0x7f0000004000)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x2b, 0x2000, 0x0, 0x0) 3.689739592s ago: executing program 2 (id=1118): lsm_get_self_attr(0x65, &(0x7f0000000040)={0x0, 0x0, 0x4f, 0x2f, ""/47}, &(0x7f0000000100)=0x4f, 0x1) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000240)) socket$inet(0x2, 0x2, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2275, &(0x7f0000000000)=0xc92b) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket(0x1, 0x80802, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[], 0x48) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00008, 0x0, 0x50032, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b702000001000000850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r5, 0x8910, 0x0) ioctl$sock_netdev_private(r5, 0x8943, &(0x7f0000000000)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900030073797a32000000000900010073797a300000000050200000060a010400000000000000000100000008000b400000000028000480240001800b0001007470726f7879000014000280080001400000000008000240000000010900010073797a3000000000148000001100010000000000000000000700000a"], 0xc4}}, 0x44000) iopl(0x43) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fc0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioperm(0xfe, 0x5, 0x3) pivot_root(&(0x7f0000000000)='.\x00', 0x0) 3.533639312s ago: executing program 2 (id=1126): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x1, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff85000000040000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x810000, &(0x7f0000000000), 0x1, 0x4ec, &(0x7f0000000140)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) 3.349754041s ago: executing program 2 (id=1128): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000003c0)=0x14) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000002c0)=0x1) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1008002, &(0x7f0000000280)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x88}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@usrquota}, {@data_err_abort}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000001200)="$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") unshare(0x2000400) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) pipe2(&(0x7f00000017c0)={0xffffffffffffffff}, 0x0) setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0, 0x0) chown(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r7, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r7, 0xa, 0x12) dup2(r7, r8) tkill(r6, 0x13) 1.737590426s ago: executing program 4 (id=1166): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000800000000005e002200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8a70d56e7ea41056, 0x11, 0xffffffffffffffff, 0x10000000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) fsopen(&(0x7f0000000500)='ocfs2_dlmfs\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000003c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x8000, 0xf7, 0x7, 0xfffff7d1}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) r5 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r6 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) recvmmsg(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0) 953.923824ms ago: executing program 1 (id=1182): socket$pptp(0x18, 0x1, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8b5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000200)='mm_page_free\x00', r1, 0x0, 0x2}, 0x18) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, @random="0005d70000fe", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, @remote, @dev, @remote}}}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="a313fa18e24a8205bd70010000000000000005"], 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) socket$nl_route(0x10, 0x3, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, 0x0, 0x0) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000b40)={'dummy0\x00'}) 929.076923ms ago: executing program 3 (id=1183): memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) fsmount(0xffffffffffffffff, 0x0, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) fcntl$setpipe(r1, 0x407, 0x4) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e21, 0x8f72, @private1, 0x7}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)='kmem_cache_free\x00', r5}, 0x18) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa2, 0x7}}, './file0\x00'}) r6 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r6, 0x2284, &(0x7f0000000080)) 904.387383ms ago: executing program 1 (id=1184): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x7, 0x8000, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000020d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r2}, 0x10) clock_nanosleep(0x1, 0x0, &(0x7f00000004c0), 0x0) 847.615373ms ago: executing program 1 (id=1186): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1810714, &(0x7f0000000380)={[{@sb={'sb', 0x3d, 0x5}}, {@noblock_validity}, {@usrquota}, {@prjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2000000006}}, {@jqfmt_vfsold}, {@usrjquota, 0x5}, {@min_batch_time={'min_batch_time', 0x3d, 0xa9c}}, {@nodiscard}]}, 0xff, 0x470, &(0x7f0000000c00)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000340)='kfree\x00'}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000a80)=ANY=[@ANYBLOB="180000000000002000000000ff000000850000000f000000850000000500000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) socket(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64, @ANYRES16=0x0], 0x1, 0x36e, &(0x7f0000000c00)="$eJzs3c9rI2UYwPEnaZpMumyTgygK0ge96GVoq2c1yC6IAZfuRtwVhNntREPGpMyESERsPXkVb/4DgsseFzwsqP9AL97WixdP9iIIuog4Mr/SJJ00aTZL0/b7gTZP8r7PzPvmF88byJuD9776uFn3zLrVkayhkhEReSRSlqwkMtFFXlLsycuX/nz4/PWbt96uVKtXtlSvVm68sqmqq2s/fPJZMe72oCD75Q8OxPht/+n9Zw/+u/FRw9OGp612Ry293f61Y912bN1ueE1T9ZpjW56tjZZnu1F7O2qvO+2dnZ5are3LKzuu7XlqtXratHvaaWvH7an1odVoqWmaenklbbjnmDFDTu3u1pZVmfGEd2bMw7z94/v+Mc2uW7GWRMzikZba3Sc6LgAAsJBG6v9vkhqhLNl+QZmJ1wL5MB5eBgT1fxKH9X+wWDis/++98FPn0rv3V+P6/0E+rf5/9Zcof6j+D84+9/r/u5HrRyuiM2/3JJ0fq/7HYlgbfkX+frhijwX1f/Bq6K/ov3j/3noYUP8DAAAAAAAAAAAAAAAAAAAAAHAWPPL9ku/7peQy+Tv8CkF8Pbl23BeNceaMe/wL8Y4C/ecDzqXrN2+JEX5xL7cq4nzZrXVr0WXcnnRcl5L8Gz4fYtGGE3thowbK8qOz260txwlL4f+KiIojtmxIScpD+WF89a3qlQ2NRPnh+Xe7tUxuJcivSyPM35SSPJWev5man5eXXhzIN6UkP9+RtjiyHb+PJfmfb6i++U51JL8Y9kvz+pN9SAAAAAAAmDtT1YiXz+Xh9W+0fjdN1bT2YC0vg+vzo58P9NfX66nr81zpudzpzh0AAAAAgIvCy3/atBzHdr3e2KAok/oU4qONNOVkwpGDIDdFn6HgYRgsH9dnaWCG0x45H/+CxrTDcL2eTD3mJPirIKl3ZrKF61CTkX6vThkk85+is3HSh8D1siefu+16a8F4dKbpDATJx0bj+si1WY88Lkh2zp3U+Zmvv/17tlNk4l17B5teu29MmGkYZEZu2ZvwpP3D9yeOZzn93eL7WX5kBgAAAMCCSIr+opfc8sbpDggAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAtortukjQlOe44AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAovg/AAD//5h69bA=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143041, 0x0) r2 = creat(&(0x7f0000000280)='./bus\x00', 0x2) socket$pppl2tp(0x18, 0x1, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000006c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000640), &(0x7f0000000680)='%-010d \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x44, &(0x7f0000001440)=ANY=[@ANYBLOB="180000007f00000040000000030000101c110000", @ANYRESDEC, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000000000085000000860000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000e000000850000000600000018000000c5000000000000000180000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRESHEX=r3], &(0x7f00000001c0)='GPL\x00', 0x28, 0xf0, &(0x7f0000000500)=""/240, 0x40f00, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000600)={0xc, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000700)=[r2, r1, r2, r2, r2, r1, r2, r3, r1], &(0x7f0000000740)=[{0x4, 0x3, 0xe, 0x2}, {0x4, 0x5, 0x1}, {0x1, 0x2, 0x5, 0x3}], 0x10, 0x10001, @void, @value}, 0x94) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f0000000980)="ca", 0x1}], 0x1, 0x10fffff, 0xffffffff, 0x0) exit(0x7) r4 = open(&(0x7f0000000200)='./bus\x00', 0x44000, 0x0) dup3(r4, r2, 0x0) finit_module(r4, 0x0, 0x0) 847.313433ms ago: executing program 3 (id=1187): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r1, 0x1, 0x10, 0x0, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r1, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x2040, 0x0) 797.862673ms ago: executing program 3 (id=1189): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_expedited', 0x101a02, 0x0) sendfile(r3, r3, 0x0, 0x9) 768.382563ms ago: executing program 3 (id=1190): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000009385000000710000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x2000000000000000}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCETHTOOL(r1, 0x8943, &(0x7f0000001980)={'macvtap0\x00', 0x0}) 727.837343ms ago: executing program 4 (id=1192): sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) recvmmsg(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0) 711.524693ms ago: executing program 3 (id=1193): sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r3}, 0x18) recvmmsg(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0) 656.136482ms ago: executing program 0 (id=1194): socket$pptp(0x18, 0x1, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8b5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000200)='mm_page_free\x00', r1, 0x0, 0x2}, 0x18) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, @random="0005d70000fe", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, @remote, @dev, @remote}}}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="a313fa18e24a8205bd70010000000000000005"], 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) socket$nl_route(0x10, 0x3, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, 0x0, 0x0) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000b40)={'dummy0\x00'}) 654.952482ms ago: executing program 0 (id=1195): sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) recvmmsg(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0) 557.531862ms ago: executing program 4 (id=1196): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x7, 0x8000, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000020d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r2}, 0x10) clock_nanosleep(0x1, 0x0, &(0x7f00000004c0), 0x0) 515.800602ms ago: executing program 4 (id=1197): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000300), 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000012c0)='scsi_dispatch_cmd_start\x00', r0}, 0x10) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000001c0)) mkdir(&(0x7f0000000140)='./control\x00', 0x0) rmdir(&(0x7f0000000100)='./control\x00') 486.459452ms ago: executing program 3 (id=1198): sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0b00000005000000050000000900000001000000", @ANYBLOB], 0x50) open_tree(0xffffffffffffffff, &(0x7f00000008c0)='./bus\x00', 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) r5 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_user(r5, 0x0, 0x27) 422.079682ms ago: executing program 4 (id=1199): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x1, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff8500000004000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x810000, &(0x7f0000000000), 0x1, 0x4ec, &(0x7f0000000140)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) 409.447532ms ago: executing program 0 (id=1200): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_expedited', 0x101a02, 0x0) sendfile(r3, r3, 0x0, 0x9) 367.667442ms ago: executing program 0 (id=1201): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000938500000071000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x2000000000000000}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCETHTOOL(r1, 0x8943, &(0x7f0000001980)={'macvtap0\x00', 0x0}) 291.997681ms ago: executing program 0 (id=1202): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='btrfs_failed_cluster_setup\x00', r0, 0x0, 0x80000001}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newqdisc={0x80, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{0xa}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0xffffffff, 0x2, 0x0, 0xf, 0xf35b, 0x193}}, @TCA_NETEM_ECN={0x8}]}}}]}, 0x80}}, 0x0) 284.872061ms ago: executing program 0 (id=1203): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000800000000005e002200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8a70d56e7ea41056, 0x11, 0xffffffffffffffff, 0x10000000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) fsopen(&(0x7f0000000500)='ocfs2_dlmfs\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000003c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x8000, 0xf7, 0x7, 0xfffff7d1}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) r5 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r6 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) sendto$packet(r2, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) socket$nl_route(0x10, 0x3, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, 0x0, 0x0) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000b40)={'dummy0\x00'}) 32.089051ms ago: executing program 2 (id=1206): sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) recvmmsg(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0) 0s ago: executing program 1 (id=1207): lsm_get_self_attr(0x65, &(0x7f0000000040)={0x0, 0x0, 0x4f, 0x2f, ""/47}, &(0x7f0000000100)=0x4f, 0x1) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000240)) socket$inet(0x2, 0x2, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2275, &(0x7f0000000000)=0xc92b) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket(0x1, 0x80802, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[], 0x48) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00008, 0x0, 0x50032, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b702000001000000850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r5, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r5, 0x8943, &(0x7f0000000000)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xc4}}, 0x44000) iopl(0x43) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fc0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioperm(0xfe, 0x5, 0x3) pivot_root(&(0x7f0000000000)='.\x00', 0x0) kernel console output (not intermixed with test programs): bytes leftover after parsing attributes in process `syz.0.584'. [ 70.497394][ T5123] FAULT_INJECTION: forcing a failure. [ 70.497394][ T5123] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 70.510629][ T5123] CPU: 1 UID: 0 PID: 5123 Comm: syz.0.586 Not tainted 6.13.0-syzkaller-09950-g60c828cf80c0 #0 [ 70.510736][ T5123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 70.510786][ T5123] Call Trace: [ 70.510794][ T5123] [ 70.510803][ T5123] dump_stack_lvl+0xf2/0x150 [ 70.510873][ T5123] dump_stack+0x15/0x1a [ 70.510901][ T5123] should_fail_ex+0x24a/0x260 [ 70.510936][ T5123] should_fail+0xb/0x10 [ 70.510965][ T5123] should_fail_usercopy+0x1a/0x20 [ 70.510983][ T5123] _copy_from_user+0x1c/0xa0 [ 70.511069][ T5123] vmemdup_user+0x12e/0x1b0 [ 70.511094][ T5123] path_setxattrat+0x1c9/0x310 [ 70.511141][ T5123] __x64_sys_lsetxattr+0x71/0x90 [ 70.511178][ T5123] x64_sys_call+0x29c8/0x2dc0 [ 70.511271][ T5123] do_syscall_64+0xc9/0x1c0 [ 70.511299][ T5123] ? clear_bhb_loop+0x55/0xb0 [ 70.511326][ T5123] ? clear_bhb_loop+0x55/0xb0 [ 70.511396][ T5123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.511486][ T5123] RIP: 0033:0x7fc7a57ccda9 [ 70.511504][ T5123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.511522][ T5123] RSP: 002b:00007fc7a3e37038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 70.511540][ T5123] RAX: ffffffffffffffda RBX: 00007fc7a59e5fa0 RCX: 00007fc7a57ccda9 [ 70.511552][ T5123] RDX: 0000000020000040 RSI: 00000000200000c0 RDI: 0000000020000080 [ 70.511619][ T5123] RBP: 00007fc7a3e37090 R08: 0000000000000000 R09: 0000000000000000 [ 70.511634][ T5123] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001 [ 70.511684][ T5123] R13: 0000000000000000 R14: 00007fc7a59e5fa0 R15: 00007fff61396c58 [ 70.511705][ T5123] [ 70.696313][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.753246][ T5129] netlink: 8 bytes leftover after parsing attributes in process `syz.0.590'. [ 70.823829][ T5137] netlink: 12 bytes leftover after parsing attributes in process `syz.3.593'. [ 70.903389][ T5146] netlink: 16 bytes leftover after parsing attributes in process `syz.0.597'. [ 71.110457][ T5169] FAULT_INJECTION: forcing a failure. [ 71.110457][ T5169] name failslab, interval 1, probability 0, space 0, times 0 [ 71.123137][ T5169] CPU: 1 UID: 0 PID: 5169 Comm: syz.4.603 Not tainted 6.13.0-syzkaller-09950-g60c828cf80c0 #0 [ 71.123161][ T5169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 71.123230][ T5169] Call Trace: [ 71.123238][ T5169] [ 71.123316][ T5169] dump_stack_lvl+0xf2/0x150 [ 71.123344][ T5169] dump_stack+0x15/0x1a [ 71.123365][ T5169] should_fail_ex+0x24a/0x260 [ 71.123417][ T5169] should_failslab+0x8f/0xb0 [ 71.123442][ T5169] kmem_cache_alloc_noprof+0x52/0x320 [ 71.123525][ T5169] ? skb_clone+0x154/0x1f0 [ 71.123562][ T5169] skb_clone+0x154/0x1f0 [ 71.123596][ T5169] dev_queue_xmit_nit+0x14b/0x680 [ 71.123654][ T5169] dev_hard_start_xmit+0xcc/0x3f0 [ 71.123683][ T5169] sch_direct_xmit+0x1a9/0x580 [ 71.123721][ T5169] __dev_queue_xmit+0xf6a/0x2090 [ 71.123819][ T5169] ? sk_skb_reason_drop+0xba/0x290 [ 71.123857][ T5169] ? __dev_queue_xmit+0x186/0x2090 [ 71.123948][ T5169] ? __rcu_read_unlock+0x4e/0x70 [ 71.123974][ T5169] ? __pfx_packet_rcv+0x10/0x10 [ 71.123997][ T5169] ? dev_queue_xmit_nit+0x629/0x680 [ 71.124091][ T5169] vlan_dev_hard_start_xmit+0x1fd/0x2c0 [ 71.124163][ T5169] dev_hard_start_xmit+0x119/0x3f0 [ 71.124197][ T5169] __dev_queue_xmit+0x100a/0x2090 [ 71.124232][ T5169] ? avc_has_perm+0xd4/0x160 [ 71.124261][ T5169] ? __dev_queue_xmit+0x186/0x2090 [ 71.124345][ T5169] ? skb_set_owner_w+0x164/0x1b0 [ 71.124382][ T5169] ? packet_parse_headers+0x4f5/0x640 [ 71.124419][ T5169] ? packet_parse_headers+0x568/0x640 [ 71.124471][ T5169] packet_xmit+0x4b/0x1e0 [ 71.124501][ T5169] packet_sendmsg+0x2e1d/0x3690 [ 71.124534][ T5169] ? selinux_socket_sendmsg+0x185/0x1c0 [ 71.124578][ T5169] ? __pfx_packet_sendmsg+0x10/0x10 [ 71.124664][ T5169] __sock_sendmsg+0x140/0x180 [ 71.124745][ T5169] __sys_sendto+0x1a8/0x230 [ 71.124787][ T5169] __x64_sys_sendto+0x78/0x90 [ 71.124823][ T5169] x64_sys_call+0x29fa/0x2dc0 [ 71.124855][ T5169] do_syscall_64+0xc9/0x1c0 [ 71.124939][ T5169] ? clear_bhb_loop+0x55/0xb0 [ 71.124973][ T5169] ? clear_bhb_loop+0x55/0xb0 [ 71.125077][ T5169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.125105][ T5169] RIP: 0033:0x7fce289acda9 [ 71.125120][ T5169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.125137][ T5169] RSP: 002b:00007fce27017038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 71.125155][ T5169] RAX: ffffffffffffffda RBX: 00007fce28bc5fa0 RCX: 00007fce289acda9 [ 71.125169][ T5169] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000d [ 71.125235][ T5169] RBP: 00007fce27017090 R08: 0000000020000040 R09: 0000000000000014 [ 71.125250][ T5169] R10: 0000000000044010 R11: 0000000000000246 R12: 0000000000000001 [ 71.125264][ T5169] R13: 0000000000000000 R14: 00007fce28bc5fa0 R15: 00007ffc9a3221a8 [ 71.125287][ T5169] [ 71.496404][ T5180] netlink: 16 bytes leftover after parsing attributes in process `syz.4.609'. [ 71.586817][ T5187] IPv4: Oversized IP packet from 127.202.26.0 [ 71.674248][ T5198] loop3: detected capacity change from 0 to 512 [ 71.681433][ T5198] ext4: Bad value for 'debug_want_extra_isize' [ 71.699526][ T5198] loop3: detected capacity change from 0 to 128 [ 71.759092][ T5205] loop0: detected capacity change from 0 to 512 [ 71.785488][ T29] kauditd_printk_skb: 556 callbacks suppressed [ 71.785503][ T29] audit: type=1326 audit(2000000031.990:2337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5208 comm="syz.2.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71c7bccda9 code=0x7ffc0000 [ 71.819646][ T5213] syz.3.616: attempt to access beyond end of device [ 71.819646][ T5213] loop3: rw=0, sector=121, nr_sectors = 920 limit=128 [ 71.843771][ T5205] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.617: corrupted in-inode xattr: invalid ea_ino [ 71.861262][ T29] audit: type=1326 audit(2000000031.990:2338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5208 comm="syz.2.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71c7bccda9 code=0x7ffc0000 [ 71.884865][ T29] audit: type=1326 audit(2000000031.990:2339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5208 comm="syz.2.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f71c7bccda9 code=0x7ffc0000 [ 71.896281][ T5205] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.617: couldn't read orphan inode 15 (err -117) [ 71.908317][ T29] audit: type=1326 audit(2000000031.990:2340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5208 comm="syz.2.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71c7bccda9 code=0x7ffc0000 [ 71.943649][ T29] audit: type=1326 audit(2000000031.990:2341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5208 comm="syz.2.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f71c7bccda9 code=0x7ffc0000 [ 71.969785][ T29] audit: type=1326 audit(2000000032.070:2342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5208 comm="syz.2.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71c7bccda9 code=0x7ffc0000 [ 71.984133][ T5209] loop7: detected capacity change from 0 to 16384 [ 71.993141][ T29] audit: type=1326 audit(2000000032.070:2343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5208 comm="syz.2.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71c7bccda9 code=0x7ffc0000 [ 72.023174][ T29] audit: type=1326 audit(2000000032.160:2344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5220 comm="syz.1.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b1f46cda9 code=0x7ffc0000 [ 72.024187][ T5205] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.046868][ T29] audit: type=1326 audit(2000000032.160:2345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5220 comm="syz.1.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9b1f46cda9 code=0x7ffc0000 [ 72.082524][ T29] audit: type=1326 audit(2000000032.160:2346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5220 comm="syz.1.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b1f46cda9 code=0x7ffc0000 [ 72.226055][ T5225] loop7: detected capacity change from 16384 to 16383 [ 72.278626][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.342296][ T5242] loop1: detected capacity change from 0 to 256 [ 72.362467][ T5245] FAULT_INJECTION: forcing a failure. [ 72.362467][ T5245] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 72.375781][ T5245] CPU: 0 UID: 0 PID: 5245 Comm: syz.0.629 Not tainted 6.13.0-syzkaller-09950-g60c828cf80c0 #0 [ 72.375811][ T5245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 72.375826][ T5245] Call Trace: [ 72.375834][ T5245] [ 72.375842][ T5245] dump_stack_lvl+0xf2/0x150 [ 72.375876][ T5245] dump_stack+0x15/0x1a [ 72.375901][ T5245] should_fail_ex+0x24a/0x260 [ 72.375984][ T5245] should_fail+0xb/0x10 [ 72.376018][ T5245] should_fail_usercopy+0x1a/0x20 [ 72.376039][ T5245] _copy_from_user+0x1c/0xa0 [ 72.376064][ T5245] copy_msghdr_from_user+0x54/0x2a0 [ 72.376118][ T5245] ? __fget_files+0x17c/0x1c0 [ 72.376153][ T5245] __sys_sendmsg+0x13e/0x230 [ 72.376202][ T5245] __x64_sys_sendmsg+0x46/0x50 [ 72.376238][ T5245] x64_sys_call+0x2734/0x2dc0 [ 72.376267][ T5245] do_syscall_64+0xc9/0x1c0 [ 72.376292][ T5245] ? clear_bhb_loop+0x55/0xb0 [ 72.376321][ T5245] ? clear_bhb_loop+0x55/0xb0 [ 72.376361][ T5245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.376389][ T5245] RIP: 0033:0x7fc7a57ccda9 [ 72.376406][ T5245] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.376426][ T5245] RSP: 002b:00007fc7a3e37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 72.376446][ T5245] RAX: ffffffffffffffda RBX: 00007fc7a59e5fa0 RCX: 00007fc7a57ccda9 [ 72.376460][ T5245] RDX: 0000000000000003 RSI: 0000000020000980 RDI: 000000000000000a [ 72.376473][ T5245] RBP: 00007fc7a3e37090 R08: 0000000000000000 R09: 0000000000000000 [ 72.376485][ T5245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.376500][ T5245] R13: 0000000000000000 R14: 00007fc7a59e5fa0 R15: 00007fff61396c58 [ 72.376522][ T5245] [ 72.585246][ T5242] FAT-fs (loop1): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 72.692450][ T5252] IPv4: Oversized IP packet from 127.202.26.0 [ 72.746438][ C0] hrtimer: interrupt took 36848 ns [ 72.910822][ T5262] loop7: detected capacity change from 0 to 16384 [ 72.954209][ T5271] loop1: detected capacity change from 0 to 512 [ 72.988201][ T5271] ext4: Bad value for 'debug_want_extra_isize' [ 73.107473][ T5274] loop7: detected capacity change from 16384 to 16383 [ 73.162146][ T5290] loop2: detected capacity change from 0 to 512 [ 73.176249][ T5290] ext4: Bad value for 'debug_want_extra_isize' [ 73.342176][ T5292] infiniband syz!: set active [ 73.346981][ T5292] infiniband syz!: added team_slave_0 [ 73.383723][ T5292] RDS/IB: syz!: added [ 73.387949][ T5292] smc: adding ib device syz! with port count 1 [ 73.399160][ T5292] smc: ib device syz! port 1 has pnetid [ 73.554442][ T5304] loop4: detected capacity change from 0 to 1024 [ 73.588743][ T5304] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.606290][ T5304] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.619369][ T5304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.630829][ T5310] netlink: 'syz.0.655': attribute type 1 has an invalid length. [ 73.823873][ T5321] SELinux: syz.4.656 (5321) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 73.860472][ T5323] team0 (unregistering): Port device team_slave_0 removed [ 73.872075][ T5323] team0 (unregistering): Port device team_slave_1 removed [ 73.875442][ T5324] SELinux: syz.0.657 (5324) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 73.903118][ T5325] 9pnet_fd: Insufficient options for proto=fd [ 74.066957][ T5334] SELinux: syz.1.660 (5334) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 74.379725][ T5345] loop2: detected capacity change from 0 to 128 [ 74.729959][ T5352] loop7: detected capacity change from 0 to 16384 [ 74.888835][ T5354] __nla_validate_parse: 5 callbacks suppressed [ 74.888889][ T5354] netlink: 12 bytes leftover after parsing attributes in process `syz.3.670'. [ 74.986114][ T5350] loop7: detected capacity change from 16384 to 16383 [ 75.013735][ T5350] blk_print_req_error: 42 callbacks suppressed [ 75.013752][ T5350] I/O error, dev loop7, sector 3328 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 75.014112][ T5352] I/O error, dev loop7, sector 6920 op 0x0:(READ) flags 0x80700 phys_seg 31 prio class 0 [ 75.020017][ T5350] buffer_io_error: 829 callbacks suppressed [ 75.020032][ T5350] Buffer I/O error on dev loop7, logical block 416, lost async page write [ 75.052837][ T5359] loop3: detected capacity change from 0 to 512 [ 75.054588][ T5350] Buffer I/O error on dev loop7, logical block 417, lost async page write [ 75.069484][ T5350] Buffer I/O error on dev loop7, logical block 418, lost async page write [ 75.078136][ T5350] Buffer I/O error on dev loop7, logical block 419, lost async page write [ 75.086724][ T5350] Buffer I/O error on dev loop7, logical block 420, lost async page write [ 75.087631][ T5359] ext4: Bad value for 'debug_want_extra_isize' [ 75.095309][ T5350] Buffer I/O error on dev loop7, logical block 421, lost async page write [ 75.110204][ T5350] Buffer I/O error on dev loop7, logical block 422, lost async page write [ 75.118821][ T5350] Buffer I/O error on dev loop7, logical block 423, lost async page write [ 75.127519][ T5350] Buffer I/O error on dev loop7, logical block 424, lost async page write [ 75.129021][ T5352] I/O error, dev loop7, sector 6920 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 75.136089][ T5350] Buffer I/O error on dev loop7, logical block 425, lost async page write [ 75.171508][ T5359] loop3: detected capacity change from 0 to 128 [ 75.193281][ T5352] I/O error, dev loop7, sector 6920 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 75.248882][ T5350] I/O error, dev loop7, sector 4352 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 75.282258][ T5360] syz.3.671: attempt to access beyond end of device [ 75.282258][ T5360] loop3: rw=0, sector=121, nr_sectors = 920 limit=128 [ 75.328300][ T5350] I/O error, dev loop7, sector 5376 op 0x1:(WRITE) flags 0x800 phys_seg 128 prio class 0 [ 75.364749][ T5350] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 75.374195][ T5350] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 75.383447][ T5350] loop7: unable to read partition table [ 75.396073][ T5350] loop_reread_partitions: partition scan of loop7 (R%0T$7)]W?18;9C?-z׌ 97d) failed (rc=-5) [ 75.497163][ T5349] I/O error, dev loop7, sector 6400 op 0x1:(WRITE) flags 0x800 phys_seg 65 prio class 0 [ 75.623190][ T5362] loop2: detected capacity change from 0 to 1024 [ 75.677349][ T5362] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.935463][ T5395] loop3: detected capacity change from 0 to 256 [ 75.958401][ T5395] 9pnet_fd: Insufficient options for proto=fd [ 75.991096][ T5397] netlink: 16 bytes leftover after parsing attributes in process `syz.3.674'. [ 76.329341][ T5406] netlink: 48 bytes leftover after parsing attributes in process `syz.3.678'. [ 76.541316][ T5412] loop7: detected capacity change from 0 to 16384 [ 76.805997][ T5414] loop7: detected capacity change from 16384 to 16383 [ 76.838700][ T5412] I/O error, dev loop7, sector 11784 op 0x0:(READ) flags 0x80700 phys_seg 29 prio class 0 [ 76.952420][ T5414] loop7: unable to read partition table [ 76.967944][ T29] kauditd_printk_skb: 438 callbacks suppressed [ 76.967958][ T29] audit: type=1326 audit(2000000037.180:2785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5411 comm="syz.3.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4c8d2cda9 code=0x7ffc0000 [ 76.997642][ T29] audit: type=1326 audit(2000000037.180:2786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5411 comm="syz.3.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4c8d2cda9 code=0x7ffc0000 [ 77.005996][ T5414] loop_reread_partitions: partition scan of loop7 (R%0T$7)]W?18;9C?-z׌ 97d) failed (rc=-5) [ 77.258065][ T29] audit: type=1326 audit(2000000037.470:2787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5417 comm="syz.3.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4c8d2cda9 code=0x7ffc0000 [ 77.281556][ T29] audit: type=1326 audit(2000000037.470:2788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5417 comm="syz.3.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4c8d2cda9 code=0x7ffc0000 [ 77.337250][ T5418] netlink: 888 bytes leftover after parsing attributes in process `syz.3.682'. [ 77.346952][ T5418] netlink: 888 bytes leftover after parsing attributes in process `syz.3.682'. [ 77.355533][ T29] audit: type=1326 audit(2000000037.520:2789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5417 comm="syz.3.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4c8d2cda9 code=0x7ffc0000 [ 77.379408][ T29] audit: type=1326 audit(2000000037.520:2790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5417 comm="syz.3.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4c8d2cda9 code=0x7ffc0000 [ 77.402743][ T29] audit: type=1326 audit(2000000037.520:2791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5417 comm="syz.3.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4c8d2cda9 code=0x7ffc0000 [ 77.426390][ T29] audit: type=1326 audit(2000000037.520:2792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5417 comm="syz.3.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4c8d2cda9 code=0x7ffc0000 [ 77.449771][ T29] audit: type=1326 audit(2000000037.520:2793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5417 comm="syz.3.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4c8d2cda9 code=0x7ffc0000 [ 77.473293][ T29] audit: type=1326 audit(2000000037.520:2794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5417 comm="syz.3.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4c8d2cda9 code=0x7ffc0000 [ 77.600457][ T5420] loop3: detected capacity change from 0 to 512 [ 77.650026][ T5420] ext4: Bad value for 'debug_want_extra_isize' [ 77.683220][ T5420] loop3: detected capacity change from 0 to 128 [ 77.749060][ T5424] netlink: 16 bytes leftover after parsing attributes in process `syz.1.685'. [ 77.791623][ T5426] syz.3.683: attempt to access beyond end of device [ 77.791623][ T5426] loop3: rw=0, sector=121, nr_sectors = 920 limit=128 [ 77.935189][ T5435] netlink: 888 bytes leftover after parsing attributes in process `syz.1.689'. [ 77.948709][ T5435] netlink: 888 bytes leftover after parsing attributes in process `syz.1.689'. [ 77.949554][ T5430] loop7: detected capacity change from 0 to 16384 [ 78.127331][ T5439] loop7: detected capacity change from 16384 to 16383 [ 78.148703][ T5444] loop1: detected capacity change from 0 to 512 [ 78.155965][ T5444] ext4: Bad value for 'debug_want_extra_isize' [ 78.170142][ T5444] loop1: detected capacity change from 0 to 128 [ 78.216955][ T5439] loop7: unable to read partition table [ 78.232205][ T5439] loop_reread_partitions: partition scan of loop7 (R%0T$7)]W?18;9C?-z׌ 97d) failed (rc=-5) [ 78.253433][ T5445] syz.1.692: attempt to access beyond end of device [ 78.253433][ T5445] loop1: rw=0, sector=121, nr_sectors = 920 limit=128 [ 78.408556][ T5451] loop7: detected capacity change from 0 to 16384 [ 78.587221][ T5455] loop7: detected capacity change from 16384 to 16383 [ 78.621650][ T5461] SELinux: syz.3.697 (5461) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 78.658821][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.742156][ T5455] loop7: unable to read partition table [ 78.774245][ T5455] loop_reread_partitions: partition scan of loop7 (R%0T$7)]W?18;9C?-z׌ 97d) failed (rc=-5) [ 78.881751][ T5480] FAULT_INJECTION: forcing a failure. [ 78.881751][ T5480] name failslab, interval 1, probability 0, space 0, times 0 [ 78.894474][ T5480] CPU: 0 UID: 0 PID: 5480 Comm: syz.0.700 Not tainted 6.13.0-syzkaller-09950-g60c828cf80c0 #0 [ 78.894549][ T5480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 78.894563][ T5480] Call Trace: [ 78.894571][ T5480] [ 78.894580][ T5480] dump_stack_lvl+0xf2/0x150 [ 78.894611][ T5480] dump_stack+0x15/0x1a [ 78.894695][ T5480] should_fail_ex+0x24a/0x260 [ 78.894732][ T5480] should_failslab+0x8f/0xb0 [ 78.894760][ T5480] __kmalloc_node_track_caller_noprof+0xa8/0x410 [ 78.894959][ T5480] ? match_strdup+0x37/0x40 [ 78.895054][ T5480] kmemdup_nul+0x30/0x80 [ 78.895080][ T5480] match_strdup+0x37/0x40 [ 78.895106][ T5480] p9_client_create+0x25c/0xaf0 [ 78.895134][ T5480] v9fs_session_init+0xf9/0xda0 [ 78.895242][ T5480] ? v9fs_mount+0x53/0x570 [ 78.895275][ T5480] ? should_fail_ex+0xd7/0x260 [ 78.895311][ T5480] ? v9fs_mount+0x53/0x570 [ 78.895340][ T5480] ? __kmalloc_cache_noprof+0x186/0x320 [ 78.895485][ T5480] v9fs_mount+0x69/0x570 [ 78.895514][ T5480] ? __pfx_v9fs_mount+0x10/0x10 [ 78.895545][ T5480] legacy_get_tree+0x77/0xd0 [ 78.895574][ T5480] vfs_get_tree+0x56/0x1e0 [ 78.895611][ T5480] do_new_mount+0x227/0x690 [ 78.895641][ T5480] path_mount+0x49b/0xb30 [ 78.895669][ T5480] __se_sys_mount+0x27f/0x2d0 [ 78.895736][ T5480] ? fput+0x1c4/0x200 [ 78.895770][ T5480] __x64_sys_mount+0x67/0x80 [ 78.895799][ T5480] x64_sys_call+0x2c84/0x2dc0 [ 78.895828][ T5480] do_syscall_64+0xc9/0x1c0 [ 78.895929][ T5480] ? clear_bhb_loop+0x55/0xb0 [ 78.895966][ T5480] ? clear_bhb_loop+0x55/0xb0 [ 78.895997][ T5480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.896028][ T5480] RIP: 0033:0x7fc7a57ccda9 [ 78.896045][ T5480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.896099][ T5480] RSP: 002b:00007fc7a3e37038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 78.896120][ T5480] RAX: ffffffffffffffda RBX: 00007fc7a59e5fa0 RCX: 00007fc7a57ccda9 [ 78.896133][ T5480] RDX: 00000000200002c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 78.896198][ T5480] RBP: 00007fc7a3e37090 R08: 0000000020000400 R09: 0000000000000000 [ 78.896212][ T5480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 78.896225][ T5480] R13: 0000000000000000 R14: 00007fc7a59e5fa0 R15: 00007fff61396c58 [ 78.896292][ T5480] [ 79.187881][ T5486] loop1: detected capacity change from 0 to 512 [ 79.214067][ T5486] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.239718][ T5486] ext4 filesystem being mounted at /166/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.256935][ T5486] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.701: bg 0: block 18: invalid block bitmap [ 79.304487][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.606643][ T5517] loop1: detected capacity change from 0 to 512 [ 79.616621][ T5522] loop4: detected capacity change from 0 to 512 [ 79.636790][ T5522] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 79.636991][ T5522] EXT4-fs (loop4): orphan cleanup on readonly fs [ 79.650197][ T5522] EXT4-fs warning (device loop4): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 79.650551][ T5522] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 79.650807][ T5522] EXT4-fs error (device loop4): ext4_orphan_get:1389: inode #16: comm syz.4.705: casefold flag without casefold feature [ 79.655719][ T5522] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.705: couldn't read orphan inode 16 (err -117) [ 79.715170][ T5517] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 79.747570][ T5522] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 79.787895][ T5522] EXT4-fs error (device loop4): ext4_lookup:1813: inode #16: comm syz.4.705: casefold flag without casefold feature [ 79.821554][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.863989][ T5535] FAULT_INJECTION: forcing a failure. [ 79.863989][ T5535] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 79.877241][ T5535] CPU: 0 UID: 0 PID: 5535 Comm: syz.1.707 Not tainted 6.13.0-syzkaller-09950-g60c828cf80c0 #0 [ 79.877276][ T5535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 79.877291][ T5535] Call Trace: [ 79.877299][ T5535] [ 79.877308][ T5535] dump_stack_lvl+0xf2/0x150 [ 79.877350][ T5535] dump_stack+0x15/0x1a [ 79.877376][ T5535] should_fail_ex+0x24a/0x260 [ 79.877415][ T5535] should_fail+0xb/0x10 [ 79.877467][ T5535] should_fail_usercopy+0x1a/0x20 [ 79.877490][ T5535] _copy_from_iter+0xd5/0xd00 [ 79.877513][ T5535] ? kmalloc_reserve+0x16e/0x190 [ 79.877542][ T5535] ? __build_skb_around+0x196/0x1f0 [ 79.877573][ T5535] ? __alloc_skb+0x21f/0x310 [ 79.877600][ T5535] ? __virt_addr_valid+0x1ed/0x250 [ 79.877629][ T5535] ? __check_object_size+0x364/0x520 [ 79.877718][ T5535] netlink_sendmsg+0x460/0x6e0 [ 79.877851][ T5535] ? __pfx_netlink_sendmsg+0x10/0x10 [ 79.877914][ T5535] __sock_sendmsg+0x140/0x180 [ 79.877939][ T5535] ____sys_sendmsg+0x312/0x410 [ 79.877977][ T5535] __sys_sendmsg+0x19d/0x230 [ 79.878028][ T5535] __x64_sys_sendmsg+0x46/0x50 [ 79.878125][ T5535] x64_sys_call+0x2734/0x2dc0 [ 79.878158][ T5535] do_syscall_64+0xc9/0x1c0 [ 79.878183][ T5535] ? clear_bhb_loop+0x55/0xb0 [ 79.878209][ T5535] ? clear_bhb_loop+0x55/0xb0 [ 79.878258][ T5535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.878290][ T5535] RIP: 0033:0x7f9b1f46cda9 [ 79.878304][ T5535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.878323][ T5535] RSP: 002b:00007f9b1dad7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 79.878349][ T5535] RAX: ffffffffffffffda RBX: 00007f9b1f685fa0 RCX: 00007f9b1f46cda9 [ 79.878364][ T5535] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000005 [ 79.878378][ T5535] RBP: 00007f9b1dad7090 R08: 0000000000000000 R09: 0000000000000000 [ 79.878392][ T5535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.878409][ T5535] R13: 0000000000000000 R14: 00007f9b1f685fa0 R15: 00007ffc5ba5ac68 [ 79.878431][ T5535] [ 80.145694][ T5537] loop2: detected capacity change from 0 to 1024 [ 80.165236][ T5537] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.284955][ T3294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.395353][ T5559] FAULT_INJECTION: forcing a failure. [ 80.395353][ T5559] name failslab, interval 1, probability 0, space 0, times 0 [ 80.408140][ T5559] CPU: 1 UID: 0 PID: 5559 Comm: gtp Not tainted 6.13.0-syzkaller-09950-g60c828cf80c0 #0 [ 80.408170][ T5559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 80.408216][ T5559] Call Trace: [ 80.408224][ T5559] [ 80.408233][ T5559] dump_stack_lvl+0xf2/0x150 [ 80.408263][ T5559] dump_stack+0x15/0x1a [ 80.408283][ T5559] should_fail_ex+0x24a/0x260 [ 80.408324][ T5559] should_failslab+0x8f/0xb0 [ 80.408355][ T5559] kmem_cache_alloc_lru_noprof+0x57/0x320 [ 80.408427][ T5559] ? __d_alloc+0x3d/0x340 [ 80.408483][ T5559] ? selinux_inode_permission+0x341/0x410 [ 80.408588][ T5559] __d_alloc+0x3d/0x340 [ 80.408623][ T5559] d_alloc_parallel+0x54/0xc80 [ 80.408662][ T5559] ? __rcu_read_unlock+0x4e/0x70 [ 80.408745][ T5559] ? __d_lookup+0x342/0x370 [ 80.408766][ T5559] ? make_vfsuid+0x52/0xa0 [ 80.408794][ T5559] ? down_read+0x171/0x4b0 [ 80.408840][ T5559] path_openat+0x6c8/0x1fc0 [ 80.408864][ T5559] ? _parse_integer_limit+0x167/0x180 [ 80.408979][ T5559] do_filp_open+0x107/0x230 [ 80.409014][ T5559] ? __pfx_kfree_link+0x10/0x10 [ 80.409050][ T5559] do_sys_openat2+0xab/0x120 [ 80.409171][ T5559] __x64_sys_openat+0xf3/0x120 [ 80.409211][ T5559] x64_sys_call+0x2b30/0x2dc0 [ 80.409244][ T5559] do_syscall_64+0xc9/0x1c0 [ 80.409273][ T5559] ? clear_bhb_loop+0x55/0xb0 [ 80.409358][ T5559] ? clear_bhb_loop+0x55/0xb0 [ 80.409392][ T5559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.409425][ T5559] RIP: 0033:0x7f9b1f46b710 [ 80.409444][ T5559] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 80.409546][ T5559] RSP: 002b:00007f9b1dad6f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 80.409634][ T5559] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f9b1f46b710 [ 80.409650][ T5559] RDX: 0000000000000002 RSI: 00007f9b1dad6fa0 RDI: 00000000ffffff9c [ 80.409665][ T5559] RBP: 00007f9b1dad6fa0 R08: 0000000000000000 R09: 0000000000000000 [ 80.409679][ T5559] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 80.409694][ T5559] R13: 0000000000000000 R14: 00007f9b1f685fa0 R15: 00007ffc5ba5ac68 [ 80.409719][ T5559] [ 80.671730][ T5576] FAULT_INJECTION: forcing a failure. [ 80.671730][ T5576] name failslab, interval 1, probability 0, space 0, times 0 [ 80.685182][ T5576] CPU: 0 UID: 0 PID: 5576 Comm: syz.0.713 Not tainted 6.13.0-syzkaller-09950-g60c828cf80c0 #0 [ 80.685246][ T5576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 80.685264][ T5576] Call Trace: [ 80.685273][ T5576] [ 80.685283][ T5576] dump_stack_lvl+0xf2/0x150 [ 80.685320][ T5576] dump_stack+0x15/0x1a [ 80.685343][ T5576] should_fail_ex+0x24a/0x260 [ 80.685382][ T5576] should_failslab+0x8f/0xb0 [ 80.685451][ T5576] kmem_cache_alloc_noprof+0x52/0x320 [ 80.685495][ T5576] ? skb_clone+0x154/0x1f0 [ 80.685646][ T5576] skb_clone+0x154/0x1f0 [ 80.685700][ T5576] __netlink_deliver_tap+0x2bd/0x4f0 [ 80.685752][ T5576] netlink_unicast+0x64a/0x670 [ 80.685792][ T5576] netlink_sendmsg+0x5cc/0x6e0 [ 80.685840][ T5576] ? __pfx_netlink_sendmsg+0x10/0x10 [ 80.685938][ T5576] __sock_sendmsg+0x140/0x180 [ 80.685964][ T5576] ____sys_sendmsg+0x312/0x410 [ 80.686005][ T5576] __sys_sendmsg+0x19d/0x230 [ 80.686140][ T5576] __x64_sys_sendmsg+0x46/0x50 [ 80.686241][ T5576] x64_sys_call+0x2734/0x2dc0 [ 80.686275][ T5576] do_syscall_64+0xc9/0x1c0 [ 80.686307][ T5576] ? clear_bhb_loop+0x55/0xb0 [ 80.686417][ T5576] ? clear_bhb_loop+0x55/0xb0 [ 80.686478][ T5576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.686512][ T5576] RIP: 0033:0x7fc7a57ccda9 [ 80.686579][ T5576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.686599][ T5576] RSP: 002b:00007fc7a3e37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 80.686622][ T5576] RAX: ffffffffffffffda RBX: 00007fc7a59e5fa0 RCX: 00007fc7a57ccda9 [ 80.686639][ T5576] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 80.686653][ T5576] RBP: 00007fc7a3e37090 R08: 0000000000000000 R09: 0000000000000000 [ 80.686667][ T5576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.686754][ T5576] R13: 0000000000000000 R14: 00007fc7a59e5fa0 R15: 00007fff61396c58 [ 80.686777][ T5576] [ 81.079025][ T5589] Illegal XDP return value 4294967274 on prog (id 570) dev N/A, expect packet loss! [ 81.119539][ T5589] syz.1.719 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 81.133719][ T5589] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.189287][ T5589] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.249727][ T5595] loop0: detected capacity change from 0 to 1024 [ 81.259886][ T5589] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.294147][ T5595] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.318871][ T5589] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.404036][ T5589] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.434652][ T5589] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.464937][ T5589] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.489703][ T5589] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.741356][ T5604] netlink: 24 bytes leftover after parsing attributes in process `syz.1.725'. [ 81.845535][ T5608] loop1: detected capacity change from 0 to 1764 [ 81.867075][ T5608] ISOFS: unable to read i-node block [ 81.872414][ T5608] isofs_fill_super: get root inode failed [ 82.063965][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.107866][ T29] kauditd_printk_skb: 249 callbacks suppressed [ 82.107883][ T29] audit: type=1326 audit(2000000042.320:3043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5624 comm="syz.3.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4c8d2cda9 code=0x7ffc0000 [ 82.140669][ T5625] FAULT_INJECTION: forcing a failure. [ 82.140669][ T5625] name failslab, interval 1, probability 0, space 0, times 0 [ 82.153613][ T5625] CPU: 0 UID: 0 PID: 5625 Comm: syz.3.735 Not tainted 6.13.0-syzkaller-09950-g60c828cf80c0 #0 [ 82.153664][ T5625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 82.153740][ T5625] Call Trace: [ 82.153749][ T5625] [ 82.153757][ T5625] dump_stack_lvl+0xf2/0x150 [ 82.153789][ T5625] dump_stack+0x15/0x1a [ 82.153812][ T5625] should_fail_ex+0x24a/0x260 [ 82.153851][ T5625] should_failslab+0x8f/0xb0 [ 82.153891][ T5625] kmem_cache_alloc_node_noprof+0x59/0x320 [ 82.153931][ T5625] ? __alloc_skb+0x10b/0x310 [ 82.153955][ T5625] __alloc_skb+0x10b/0x310 [ 82.154032][ T29] audit: type=1326 audit(2000000042.320:3044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5624 comm="syz.3.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4c8d2cda9 code=0x7ffc0000 [ 82.154034][ T5625] ? audit_log_start+0x34c/0x6b0 [ 82.154074][ T5625] audit_log_start+0x368/0x6b0 [ 82.154122][ T5625] ? kmem_cache_free+0xdc/0x2d0 [ 82.154168][ T5625] audit_seccomp+0x4b/0x130 [ 82.154204][ T5625] __seccomp_filter+0x6fa/0x1180 [ 82.154232][ T5625] ? __rcu_read_unlock+0x34/0x70 [ 82.154258][ T5625] ? prepend_path+0x56f/0x600 [ 82.154328][ T5625] ? should_fail_ex+0xd7/0x260 [ 82.154396][ T5625] __secure_computing+0x9f/0x1c0 [ 82.154422][ T5625] syscall_trace_enter+0xd1/0x1f0 [ 82.154465][ T5625] ? fpregs_assert_state_consistent+0x83/0xa0 [ 82.154512][ T5625] do_syscall_64+0xaa/0x1c0 [ 82.154542][ T5625] ? clear_bhb_loop+0x55/0xb0 [ 82.154597][ T5625] ? clear_bhb_loop+0x55/0xb0 [ 82.154629][ T5625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.154689][ T5625] RIP: 0033:0x7fd4c8d2b7bc [ 82.154708][ T5625] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 82.154730][ T5625] RSP: 002b:00007fd4c7391030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 82.154802][ T5625] RAX: ffffffffffffffda RBX: 00007fd4c8f45fa0 RCX: 00007fd4c8d2b7bc [ 82.154818][ T5625] RDX: 000000000000000f RSI: 00007fd4c73910a0 RDI: 0000000000000004 [ 82.154832][ T5625] RBP: 00007fd4c7391090 R08: 0000000000000000 R09: 0000000000000000 [ 82.154847][ T5625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.154861][ T5625] R13: 0000000000000000 R14: 00007fd4c8f45fa0 R15: 00007ffe4fd55318 [ 82.154891][ T5625] [ 82.154900][ T5625] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 82.164519][ T29] audit: type=1326 audit(2000000042.350:3045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5623 comm="syz.0.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7a57ccda9 code=0x7ffc0000 [ 82.174805][ T5625] audit: out of memory in audit_log_start [ 82.178110][ T29] audit: type=1326 audit(2000000042.350:3046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5623 comm="syz.0.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7a57ccda9 code=0x7ffc0000 [ 82.215419][ T5626] netlink: 888 bytes leftover after parsing attributes in process `syz.0.734'. [ 82.237503][ T29] audit: type=1326 audit(2000000042.350:3047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5624 comm="syz.3.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4c8d2cda9 code=0x7ffc0000 [ 82.307187][ T5626] netlink: 888 bytes leftover after parsing attributes in process `syz.0.734'. [ 82.312072][ T29] audit: type=1326 audit(2000000042.350:3048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5624 comm="syz.3.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4c8d2cda9 code=0x7ffc0000 [ 82.389613][ T5636] netlink: 16 bytes leftover after parsing attributes in process `syz.3.739'. [ 82.396024][ T29] audit: type=1326 audit(2000000042.350:3049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5624 comm="syz.3.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4c8d2cda9 code=0x7ffc0000 [ 82.396092][ T29] audit: type=1326 audit(2000000042.350:3050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5624 comm="syz.3.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4c8d2cda9 code=0x7ffc0000 [ 82.637363][ T5648] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.658211][ T5652] loop3: detected capacity change from 0 to 1024 [ 82.678591][ T5652] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.735840][ T5655] loop7: detected capacity change from 0 to 16384 [ 82.743467][ T5648] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.810037][ T5655] blk_print_req_error: 36 callbacks suppressed [ 82.810065][ T5655] I/O error, dev loop7, sector 9728 op 0x0:(READ) flags 0x80700 phys_seg 16 prio class 0 [ 82.830223][ T5655] I/O error, dev loop7, sector 9984 op 0x0:(READ) flags 0x80700 phys_seg 16 prio class 0 [ 82.844270][ T5648] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.859086][ T5655] I/O error, dev loop7, sector 9728 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 82.868714][ T5655] buffer_io_error: 2261 callbacks suppressed [ 82.868727][ T5655] Buffer I/O error on dev loop7, logical block 1216, async page read [ 82.906364][ T5654] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 82.916193][ T5654] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 82.924796][ T5654] Buffer I/O error on dev loop7, logical block 1, lost async page write [ 82.933350][ T5654] Buffer I/O error on dev loop7, logical block 2, lost async page write [ 82.941918][ T5654] Buffer I/O error on dev loop7, logical block 3, lost async page write [ 82.950406][ T5654] Buffer I/O error on dev loop7, logical block 4, lost async page write [ 82.958805][ T5654] Buffer I/O error on dev loop7, logical block 5, lost async page write [ 82.967272][ T5654] Buffer I/O error on dev loop7, logical block 6, lost async page write [ 82.975665][ T5654] Buffer I/O error on dev loop7, logical block 7, lost async page write [ 82.984187][ T5654] Buffer I/O error on dev loop7, logical block 8, lost async page write [ 82.998323][ T5648] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.010966][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.022962][ T5654] I/O error, dev loop7, sector 1024 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 83.062874][ T5654] I/O error, dev loop7, sector 2048 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 83.085896][ T5648] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.110811][ T5648] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.126372][ T5654] I/O error, dev loop7, sector 3072 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 83.138152][ T5648] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.172570][ T5654] I/O error, dev loop7, sector 4096 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 83.177860][ T5648] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.202633][ T5654] I/O error, dev loop7, sector 5120 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 83.232008][ T5654] I/O error, dev loop7, sector 6144 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 83.297640][ T5692] netlink: 60 bytes leftover after parsing attributes in process `syz.2.750'. [ 83.349106][ T5692] netlink: 36 bytes leftover after parsing attributes in process `syz.2.750'. [ 83.365891][ T5696] loop0: detected capacity change from 0 to 512 [ 83.381897][ T5696] EXT4-fs: Ignoring removed oldalloc option [ 83.400808][ T5696] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.751: corrupted in-inode xattr: overlapping e_value [ 83.460244][ T5696] EXT4-fs (loop0): Remounting filesystem read-only [ 83.484270][ T5696] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.524974][ T5696] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 83.532579][ T5696] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.569888][ T5718] loop1: detected capacity change from 0 to 512 [ 83.588165][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.608138][ T5696] ALSA: seq fatal error: cannot create timer (-19) [ 83.639224][ T5718] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.656344][ T5723] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 83.675158][ T5718] ext4 filesystem being mounted at /187/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.713465][ T5718] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.757: bg 0: block 18: invalid block bitmap [ 83.767221][ T5731] loop3: detected capacity change from 0 to 164 [ 83.786540][ T5729] vhci_hcd: default hub control req: ff03 v0010 i0005 l5 [ 83.828226][ T5740] loop3: detected capacity change from 0 to 512 [ 83.866656][ T5740] ext4: Bad value for 'debug_want_extra_isize' [ 83.870505][ T5742] loop7: detected capacity change from 0 to 16384 [ 83.892755][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.907479][ T5740] loop3: detected capacity change from 0 to 128 [ 83.999475][ T5755] syz.3.764: attempt to access beyond end of device [ 83.999475][ T5755] loop3: rw=0, sector=121, nr_sectors = 920 limit=128 [ 84.043479][ T5758] batadv1: entered promiscuous mode [ 84.076082][ T5751] loop7: detected capacity change from 16384 to 16383 [ 84.125352][ T5751] loop7: unable to read partition table [ 84.135571][ T5761] serio: Serial port ptm0 [ 84.141058][ T5751] loop_reread_partitions: partition scan of loop7 (R%0T$7)]W?18;9C?-z׌ 97d) failed (rc=-5) [ 84.238043][ T5777] FAULT_INJECTION: forcing a failure. [ 84.238043][ T5777] name failslab, interval 1, probability 0, space 0, times 0 [ 84.250815][ T5777] CPU: 1 UID: 0 PID: 5777 Comm: syz.2.775 Not tainted 6.13.0-syzkaller-09950-g60c828cf80c0 #0 [ 84.250909][ T5777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 84.250920][ T5777] Call Trace: [ 84.250925][ T5777] [ 84.250932][ T5777] dump_stack_lvl+0xf2/0x150 [ 84.250976][ T5777] dump_stack+0x15/0x1a [ 84.250994][ T5777] should_fail_ex+0x24a/0x260 [ 84.251025][ T5777] should_failslab+0x8f/0xb0 [ 84.251116][ T5777] __kmalloc_noprof+0xab/0x3f0 [ 84.251143][ T5777] ? sk_prot_alloc+0xab/0x190 [ 84.251217][ T5777] sk_prot_alloc+0xab/0x190 [ 84.251240][ T5777] sk_alloc+0x33/0x360 [ 84.251261][ T5777] ? bpf_prog_test_run_skb+0x151/0xc00 [ 84.251289][ T5777] bpf_prog_test_run_skb+0x24b/0xc00 [ 84.251332][ T5777] ? strncpy_from_kernel_nofault+0x72/0x140 [ 84.251367][ T5777] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 84.251425][ T5777] bpf_prog_test_run+0x20f/0x3a0 [ 84.251498][ T5777] __sys_bpf+0x400/0x7a0 [ 84.251527][ T5777] __x64_sys_bpf+0x43/0x50 [ 84.251548][ T5777] x64_sys_call+0x2914/0x2dc0 [ 84.251581][ T5777] do_syscall_64+0xc9/0x1c0 [ 84.251601][ T5777] ? clear_bhb_loop+0x55/0xb0 [ 84.251625][ T5777] ? clear_bhb_loop+0x55/0xb0 [ 84.251720][ T5777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.251772][ T5777] RIP: 0033:0x7f71c7bccda9 [ 84.251784][ T5777] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.251800][ T5777] RSP: 002b:00007f71c6237038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 84.251816][ T5777] RAX: ffffffffffffffda RBX: 00007f71c7de5fa0 RCX: 00007f71c7bccda9 [ 84.251826][ T5777] RDX: 000000000000004c RSI: 0000000020000240 RDI: 000000000000000a [ 84.251836][ T5777] RBP: 00007f71c6237090 R08: 0000000000000000 R09: 0000000000000000 [ 84.251902][ T5777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.251917][ T5777] R13: 0000000000000000 R14: 00007f71c7de5fa0 R15: 00007ffd95d012b8 [ 84.251943][ T5777] [ 84.466942][ T5779] FAULT_INJECTION: forcing a failure. [ 84.466942][ T5779] name failslab, interval 1, probability 0, space 0, times 0 [ 84.480158][ T5779] CPU: 0 UID: 0 PID: 5779 Comm: syz.4.776 Not tainted 6.13.0-syzkaller-09950-g60c828cf80c0 #0 [ 84.480183][ T5779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 84.480270][ T5779] Call Trace: [ 84.480278][ T5779] [ 84.480286][ T5779] dump_stack_lvl+0xf2/0x150 [ 84.480318][ T5779] dump_stack+0x15/0x1a [ 84.480341][ T5779] should_fail_ex+0x24a/0x260 [ 84.480394][ T5779] should_failslab+0x8f/0xb0 [ 84.480422][ T5779] kmem_cache_alloc_noprof+0x52/0x320 [ 84.480459][ T5779] ? skb_clone+0x154/0x1f0 [ 84.480489][ T5779] skb_clone+0x154/0x1f0 [ 84.480590][ T5779] __netlink_deliver_tap+0x2bd/0x4f0 [ 84.480684][ T5779] netlink_unicast+0x64a/0x670 [ 84.480716][ T5779] netlink_sendmsg+0x5cc/0x6e0 [ 84.480751][ T5779] ? __pfx_netlink_sendmsg+0x10/0x10 [ 84.480840][ T5779] __sock_sendmsg+0x140/0x180 [ 84.480864][ T5779] ____sys_sendmsg+0x312/0x410 [ 84.480926][ T5779] __sys_sendmsg+0x19d/0x230 [ 84.480974][ T5779] __x64_sys_sendmsg+0x46/0x50 [ 84.481002][ T5779] x64_sys_call+0x2734/0x2dc0 [ 84.481029][ T5779] do_syscall_64+0xc9/0x1c0 [ 84.481072][ T5779] ? clear_bhb_loop+0x55/0xb0 [ 84.481126][ T5779] ? clear_bhb_loop+0x55/0xb0 [ 84.481158][ T5779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.481184][ T5779] RIP: 0033:0x7fce289acda9 [ 84.481259][ T5779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.481282][ T5779] RSP: 002b:00007fce27017038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 84.481305][ T5779] RAX: ffffffffffffffda RBX: 00007fce28bc5fa0 RCX: 00007fce289acda9 [ 84.481320][ T5779] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 84.481335][ T5779] RBP: 00007fce27017090 R08: 0000000000000000 R09: 0000000000000000 [ 84.481381][ T5779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.481450][ T5779] R13: 0000000000000000 R14: 00007fce28bc5fa0 R15: 00007ffc9a3221a8 [ 84.481472][ T5779] [ 84.746707][ T5781] team0: Device gtp0 is of different type [ 84.761757][ T5787] loop4: detected capacity change from 0 to 512 [ 84.769916][ T5787] ext4: Bad value for 'debug_want_extra_isize' [ 84.782943][ T5787] loop4: detected capacity change from 0 to 128 [ 84.792981][ T5789] vlan2: entered promiscuous mode [ 84.801715][ T5789] team_slave_0: entered promiscuous mode [ 84.807463][ T5789] team_slave_1: entered promiscuous mode [ 84.813207][ T5789] team0: entered promiscuous mode [ 84.820123][ T3402] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:a8aa:aaff:feaa:aa17 error=-28 [ 84.833072][ T5789] bond0: (slave vlan2): Enslaving as an active interface with an up link [ 84.860777][ T5794] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 84.904680][ T5798] syz.4.780: attempt to access beyond end of device [ 84.904680][ T5798] loop4: rw=0, sector=121, nr_sectors = 920 limit=128 [ 85.050604][ T5812] FAULT_INJECTION: forcing a failure. [ 85.050604][ T5812] name failslab, interval 1, probability 0, space 0, times 0 [ 85.063323][ T5812] CPU: 0 UID: 0 PID: 5812 Comm: syz.0.792 Not tainted 6.13.0-syzkaller-09950-g60c828cf80c0 #0 [ 85.063350][ T5812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 85.063365][ T5812] Call Trace: [ 85.063372][ T5812] [ 85.063381][ T5812] dump_stack_lvl+0xf2/0x150 [ 85.063415][ T5812] dump_stack+0x15/0x1a [ 85.063463][ T5812] should_fail_ex+0x24a/0x260 [ 85.063579][ T5812] should_failslab+0x8f/0xb0 [ 85.063646][ T5812] kmem_cache_alloc_node_noprof+0x59/0x320 [ 85.063688][ T5812] ? __alloc_skb+0x10b/0x310 [ 85.063774][ T5812] __alloc_skb+0x10b/0x310 [ 85.063804][ T5812] alloc_skb_with_frags+0x80/0x450 [ 85.063835][ T5812] ? is_bpf_text_address+0x138/0x150 [ 85.063891][ T5812] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 85.063941][ T5812] ? kernel_text_address+0x96/0xb0 [ 85.064015][ T5812] sock_alloc_send_pskb+0x435/0x4f0 [ 85.064053][ T5812] ? stack_depot_save_flags+0x7b0/0x820 [ 85.064139][ T5812] __ip_append_data+0x1975/0x24c0 [ 85.064168][ T5812] ? __x64_sys_sendmmsg+0x57/0x70 [ 85.064203][ T5812] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 85.064223][ T5812] ? dst_init+0x208/0x260 [ 85.064266][ T5812] ? _raw_spin_unlock_bh+0x36/0x40 [ 85.064302][ T5812] ? rt_set_nexthop+0x4c7/0x560 [ 85.064352][ T5812] ? ipv4_mtu+0x1e0/0x210 [ 85.064383][ T5812] ? __sock_tx_timestamp+0x6b/0x80 [ 85.064404][ T5812] ip_make_skb+0x13f/0x2c0 [ 85.064424][ T5812] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 85.064479][ T5812] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 85.064502][ T5812] udp_sendmsg+0x1244/0x1310 [ 85.064540][ T5812] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 85.064567][ T5812] ? __pfx_udp_sendmsg+0x10/0x10 [ 85.064626][ T5812] inet_sendmsg+0xaf/0xd0 [ 85.064651][ T5812] __sock_sendmsg+0x102/0x180 [ 85.064673][ T5812] ____sys_sendmsg+0x312/0x410 [ 85.064727][ T5812] __sys_sendmmsg+0x227/0x4b0 [ 85.064786][ T5812] __x64_sys_sendmmsg+0x57/0x70 [ 85.064819][ T5812] x64_sys_call+0x29aa/0x2dc0 [ 85.064883][ T5812] do_syscall_64+0xc9/0x1c0 [ 85.064916][ T5812] ? clear_bhb_loop+0x55/0xb0 [ 85.064950][ T5812] ? clear_bhb_loop+0x55/0xb0 [ 85.064995][ T5812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.065027][ T5812] RIP: 0033:0x7fc7a57ccda9 [ 85.065043][ T5812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.065061][ T5812] RSP: 002b:00007fc7a3e37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 85.065082][ T5812] RAX: ffffffffffffffda RBX: 00007fc7a59e5fa0 RCX: 00007fc7a57ccda9 [ 85.065097][ T5812] RDX: 000000000800001d RSI: 0000000020007fc0 RDI: 0000000000000006 [ 85.065109][ T5812] RBP: 00007fc7a3e37090 R08: 0000000000000000 R09: 0000000000000000 [ 85.065120][ T5812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.065132][ T5812] R13: 0000000000000000 R14: 00007fc7a59e5fa0 R15: 00007fff61396c58 [ 85.065150][ T5812] [ 85.410598][ T5817] Invalid ELF header magic: != ELF [ 85.430734][ T5820] loop0: detected capacity change from 0 to 2048 [ 85.460258][ T5820] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.493791][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.548204][ T5835] netlink: 12 bytes leftover after parsing attributes in process `syz.0.799'. [ 85.557474][ T5833] netlink: 12 bytes leftover after parsing attributes in process `syz.2.801'. [ 85.580173][ T5837] netlink: 12 bytes leftover after parsing attributes in process `syz.1.802'. [ 85.643075][ T5846] loop4: detected capacity change from 0 to 512 [ 85.656631][ T5846] EXT4-fs: Ignoring removed orlov option [ 85.665483][ T5846] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 85.676537][ T5843] netlink: 60 bytes leftover after parsing attributes in process `syz.3.804'. [ 85.687478][ T5846] EXT4-fs (loop4): 1 truncate cleaned up [ 85.703475][ T5846] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.856693][ T5862] FAULT_INJECTION: forcing a failure. [ 85.856693][ T5862] name failslab, interval 1, probability 0, space 0, times 0 [ 85.869479][ T5862] CPU: 1 UID: 0 PID: 5862 Comm: syz.1.810 Not tainted 6.13.0-syzkaller-09950-g60c828cf80c0 #0 [ 85.869509][ T5862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 85.869522][ T5862] Call Trace: [ 85.869530][ T5862] [ 85.869537][ T5862] dump_stack_lvl+0xf2/0x150 [ 85.869565][ T5862] dump_stack+0x15/0x1a [ 85.869645][ T5862] should_fail_ex+0x24a/0x260 [ 85.869686][ T5862] should_failslab+0x8f/0xb0 [ 85.869786][ T5862] kmem_cache_alloc_noprof+0x52/0x320 [ 85.869827][ T5862] ? skb_clone+0x154/0x1f0 [ 85.869896][ T5862] skb_clone+0x154/0x1f0 [ 85.869924][ T5862] __netlink_deliver_tap+0x2bd/0x4f0 [ 85.869967][ T5862] netlink_unicast+0x64a/0x670 [ 85.870000][ T5862] netlink_sendmsg+0x5cc/0x6e0 [ 85.870124][ T5862] ? __pfx_netlink_sendmsg+0x10/0x10 [ 85.870207][ T5862] __sock_sendmsg+0x140/0x180 [ 85.870233][ T5862] ____sys_sendmsg+0x312/0x410 [ 85.870265][ T5862] __sys_sendmsg+0x19d/0x230 [ 85.870341][ T5862] __x64_sys_sendmsg+0x46/0x50 [ 85.870376][ T5862] x64_sys_call+0x2734/0x2dc0 [ 85.870407][ T5862] do_syscall_64+0xc9/0x1c0 [ 85.870435][ T5862] ? clear_bhb_loop+0x55/0xb0 [ 85.870557][ T5862] ? clear_bhb_loop+0x55/0xb0 [ 85.870588][ T5862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.870656][ T5862] RIP: 0033:0x7f9b1f46cda9 [ 85.870675][ T5862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.870733][ T5862] RSP: 002b:00007f9b1dad7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 85.870752][ T5862] RAX: ffffffffffffffda RBX: 00007f9b1f685fa0 RCX: 00007f9b1f46cda9 [ 85.870765][ T5862] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 85.870787][ T5862] RBP: 00007f9b1dad7090 R08: 0000000000000000 R09: 0000000000000000 [ 85.870802][ T5862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.870896][ T5862] R13: 0000000000000000 R14: 00007f9b1f685fa0 R15: 00007ffc5ba5ac68 [ 85.870916][ T5862] [ 86.410901][ T5872] loop1: detected capacity change from 0 to 512 [ 86.433349][ T5872] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.1.815: corrupted xattr block 95: invalid header [ 86.456364][ T5872] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2863: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 86.513759][ T5872] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.815: bg 0: block 7: invalid block bitmap [ 86.533349][ T5872] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 86.542350][ T5872] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2977: inode #11: comm syz.1.815: corrupted xattr block 95: invalid header [ 86.573868][ T5875] loop0: detected capacity change from 0 to 8192 [ 86.589672][ T5879] loop2: detected capacity change from 0 to 512 [ 86.599417][ T5872] EXT4-fs warning (device loop1): ext4_evict_inode:276: xattr delete (err -117) [ 86.608782][ T5872] EXT4-fs (loop1): 1 orphan inode deleted [ 86.614898][ T5872] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.627521][ T5879] ext4: Bad value for 'debug_want_extra_isize' [ 86.698663][ T5872] netlink: 'syz.1.815': attribute type 2 has an invalid length. [ 86.706496][ T5872] netlink: 'syz.1.815': attribute type 1 has an invalid length. [ 86.800793][ T5886] __nla_validate_parse: 9 callbacks suppressed [ 86.800812][ T5886] netlink: 12 bytes leftover after parsing attributes in process `syz.0.820'. [ 86.929037][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.989187][ T5895] loop1: detected capacity change from 0 to 128 [ 87.035694][ T5899] IPv4: Oversized IP packet from 127.202.26.0 [ 87.114468][ T5905] loop1: detected capacity change from 0 to 512 [ 87.138991][ T5905] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.151811][ T5905] ext4 filesystem being mounted at /203/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.164137][ T5905] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.827: bg 0: block 18: invalid block bitmap [ 87.190355][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.205326][ T29] kauditd_printk_skb: 442 callbacks suppressed [ 87.205339][ T29] audit: type=1400 audit(2000000047.410:3493): avc: denied { read } for pid=5912 comm="syz.0.831" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:inetd_log_t:s0" [ 87.238764][ T29] audit: type=1400 audit(2000000047.410:3494): avc: denied { open } for pid=5912 comm="syz.0.831" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:inetd_log_t:s0" [ 87.267258][ T29] audit: type=1326 audit(2000000047.410:3495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5912 comm="syz.0.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7a57ccda9 code=0x7ffc0000 [ 87.291100][ T29] audit: type=1326 audit(2000000047.410:3496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5912 comm="syz.0.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7a57ccda9 code=0x7ffc0000 [ 87.314534][ T29] audit: type=1326 audit(2000000047.410:3497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5912 comm="syz.0.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7a57ccda9 code=0x7ffc0000 [ 87.338083][ T29] audit: type=1326 audit(2000000047.410:3498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5912 comm="syz.0.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7a57ccda9 code=0x7ffc0000 [ 87.361590][ T29] audit: type=1326 audit(2000000047.410:3499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5912 comm="syz.0.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc7a57ccda9 code=0x7ffc0000 [ 87.384967][ T29] audit: type=1326 audit(2000000047.410:3500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5912 comm="syz.0.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7a57ccda9 code=0x7ffc0000 [ 87.408480][ T29] audit: type=1326 audit(2000000047.410:3501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5912 comm="syz.0.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7a57ccda9 code=0x7ffc0000 [ 87.431825][ T29] audit: type=1326 audit(2000000047.410:3502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5912 comm="syz.0.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc7a57ccda9 code=0x7ffc0000 [ 87.466173][ T5918] loop3: detected capacity change from 0 to 2048 [ 87.482171][ T3294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.527827][ T5918] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.540615][ T5927] FAULT_INJECTION: forcing a failure. [ 87.540615][ T5927] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 87.553767][ T5927] CPU: 0 UID: 0 PID: 5927 Comm: syz.4.832 Not tainted 6.13.0-syzkaller-09950-g60c828cf80c0 #0 [ 87.553799][ T5927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 87.553848][ T5927] Call Trace: [ 87.553928][ T5927] [ 87.553937][ T5927] dump_stack_lvl+0xf2/0x150 [ 87.554111][ T5927] dump_stack+0x15/0x1a [ 87.554132][ T5927] should_fail_ex+0x24a/0x260 [ 87.554188][ T5927] should_fail+0xb/0x10 [ 87.554223][ T5927] should_fail_usercopy+0x1a/0x20 [ 87.554246][ T5927] _copy_from_user+0x1c/0xa0 [ 87.554273][ T5927] restore_sigcontext+0x64/0x220 [ 87.554311][ T5927] __do_sys_rt_sigreturn+0xfd/0x160 [ 87.554396][ T5927] x64_sys_call+0x2982/0x2dc0 [ 87.554422][ T5927] do_syscall_64+0xc9/0x1c0 [ 87.554450][ T5927] ? clear_bhb_loop+0x55/0xb0 [ 87.554482][ T5927] ? clear_bhb_loop+0x55/0xb0 [ 87.554522][ T5927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.554548][ T5927] RIP: 0033:0x7fce28948fa9 [ 87.554563][ T5927] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 87.554581][ T5927] RSP: 002b:00007fce27016a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 87.554641][ T5927] RAX: ffffffffffffffda RBX: 00007fce28bc5fa0 RCX: 00007fce28948fa9 [ 87.554654][ T5927] RDX: 00007fce27016a80 RSI: 00007fce27016bb0 RDI: 0000000000000021 [ 87.554665][ T5927] RBP: 00007fce27017090 R08: 0000000000000000 R09: 0000000000000000 [ 87.554677][ T5927] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 87.554689][ T5927] R13: 0000000000000000 R14: 00007fce28bc5fa0 R15: 00007ffc9a3221a8 [ 87.554706][ T5927] [ 87.729018][ T5930] (unnamed net_device) (uninitialized): (slave batadv_slave_0): Device is not bonding slave [ 87.739182][ T5930] (unnamed net_device) (uninitialized): option active_slave: invalid value (batadv_slave_0) [ 87.829405][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.852593][ T5935] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.840'. [ 87.889982][ T5939] loop3: detected capacity change from 0 to 2048 [ 87.901539][ T5941] loop1: detected capacity change from 0 to 512 [ 87.910888][ T5937] loop2: detected capacity change from 0 to 512 [ 87.919940][ T5941] ext4: Bad value for 'debug_want_extra_isize' [ 87.930938][ T5941] loop1: detected capacity change from 0 to 128 [ 87.962202][ T5937] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 87.970540][ T5937] EXT4-fs (loop2): orphan cleanup on readonly fs [ 87.977887][ T5937] EXT4-fs warning (device loop2): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 87.993197][ T5937] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 88.000653][ T5939] GPT:first_usable_lbas don't match. [ 88.001030][ T5937] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.836: bg 0: block 40: padding at end of block bitmap is not set [ 88.006255][ T5939] GPT:34 != 290 [ 88.023913][ T5939] GPT: Use GNU Parted to correct GPT errors. [ 88.025630][ T5947] syz.1.841: attempt to access beyond end of device [ 88.025630][ T5947] loop1: rw=0, sector=121, nr_sectors = 920 limit=128 [ 88.030083][ T5939] loop3: p1 p2 p3 [ 88.043731][ T5937] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 88.057010][ T5937] EXT4-fs (loop2): 1 truncate cleaned up [ 88.063113][ T5937] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 88.087801][ T2998] GPT:first_usable_lbas don't match. [ 88.093198][ T2998] GPT:34 != 290 [ 88.096907][ T2998] GPT: Use GNU Parted to correct GPT errors. [ 88.103484][ T2998] loop3: p1 p2 p3 [ 88.137279][ T5939] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 88.178926][ T5958] FAULT_INJECTION: forcing a failure. [ 88.178926][ T5958] name failslab, interval 1, probability 0, space 0, times 0 [ 88.191595][ T5958] CPU: 0 UID: 0 PID: 5958 Comm: syz.4.846 Not tainted 6.13.0-syzkaller-09950-g60c828cf80c0 #0 [ 88.191662][ T5958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 88.191676][ T5958] Call Trace: [ 88.191684][ T5958] [ 88.191691][ T5958] dump_stack_lvl+0xf2/0x150 [ 88.191719][ T5958] dump_stack+0x15/0x1a [ 88.191739][ T5958] should_fail_ex+0x24a/0x260 [ 88.191801][ T5958] should_failslab+0x8f/0xb0 [ 88.191867][ T5958] kmem_cache_alloc_noprof+0x52/0x320 [ 88.192037][ T5958] ? fdb_create+0x111/0x9d0 [ 88.192066][ T5958] fdb_create+0x111/0x9d0 [ 88.192094][ T5958] ? fdb_find_rcu+0x277/0x290 [ 88.192204][ T5958] __br_fdb_add+0x46e/0x9e0 [ 88.192270][ T5958] br_fdb_add+0x4dc/0x690 [ 88.192308][ T5958] ? __nla_parse+0x40/0x60 [ 88.192329][ T5958] ? __pfx_br_fdb_add+0x10/0x10 [ 88.192366][ T5958] rtnl_fdb_add+0x527/0x670 [ 88.192484][ T5958] ? __pfx_rtnl_fdb_add+0x10/0x10 [ 88.192514][ T5958] rtnetlink_rcv_msg+0x6aa/0x710 [ 88.192548][ T5958] ? ref_tracker_free+0x3a5/0x410 [ 88.192585][ T5958] ? __dev_queue_xmit+0x186/0x2090 [ 88.192688][ T5958] netlink_rcv_skb+0x12c/0x230 [ 88.192778][ T5958] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 88.192818][ T5958] rtnetlink_rcv+0x1c/0x30 [ 88.192849][ T5958] netlink_unicast+0x599/0x670 [ 88.192883][ T5958] netlink_sendmsg+0x5cc/0x6e0 [ 88.192946][ T5958] ? __pfx_netlink_sendmsg+0x10/0x10 [ 88.192979][ T5958] __sock_sendmsg+0x140/0x180 [ 88.193020][ T5958] ____sys_sendmsg+0x312/0x410 [ 88.193058][ T5958] __sys_sendmsg+0x19d/0x230 [ 88.193124][ T5958] __x64_sys_sendmsg+0x46/0x50 [ 88.193158][ T5958] x64_sys_call+0x2734/0x2dc0 [ 88.193190][ T5958] do_syscall_64+0xc9/0x1c0 [ 88.193220][ T5958] ? clear_bhb_loop+0x55/0xb0 [ 88.193252][ T5958] ? clear_bhb_loop+0x55/0xb0 [ 88.193354][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.193384][ T5958] RIP: 0033:0x7fce289acda9 [ 88.193400][ T5958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.193419][ T5958] RSP: 002b:00007fce27017038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 88.193437][ T5958] RAX: ffffffffffffffda RBX: 00007fce28bc5fa0 RCX: 00007fce289acda9 [ 88.193452][ T5958] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 88.193527][ T5958] RBP: 00007fce27017090 R08: 0000000000000000 R09: 0000000000000000 [ 88.193541][ T5958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.193555][ T5958] R13: 0000000000000000 R14: 00007fce28bc5fa0 R15: 00007ffc9a3221a8 [ 88.193577][ T5958] [ 88.503283][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.535096][ T3279] udevd[3279]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 88.546635][ T4489] udevd[4489]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 88.547401][ T3373] udevd[3373]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 88.605699][ T5974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.620629][ T5974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.637014][ T5973] loop2: detected capacity change from 0 to 1024 [ 88.647630][ T5978] IPv4: Oversized IP packet from 127.202.26.0 [ 88.655390][ T5976] loop4: detected capacity change from 0 to 128 [ 88.672502][ T5974] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.694282][ T5973] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.855: Failed to acquire dquot type 0 [ 88.711493][ T5973] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 88.727130][ T5973] EXT4-fs error (device loop2): ext4_do_update_inode:5154: inode #13: comm syz.2.855: corrupted inode contents [ 88.745413][ T5973] EXT4-fs error (device loop2): ext4_dirty_inode:6042: inode #13: comm syz.2.855: mark_inode_dirty error [ 88.757647][ T5973] EXT4-fs error (device loop2): ext4_do_update_inode:5154: inode #13: comm syz.2.855: corrupted inode contents [ 88.769784][ T5973] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #13: comm syz.2.855: mark_inode_dirty error [ 88.818523][ T5974] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.837571][ T5985] FAULT_INJECTION: forcing a failure. [ 88.837571][ T5985] name failslab, interval 1, probability 0, space 0, times 0 [ 88.850282][ T5985] CPU: 0 UID: 0 PID: 5985 Comm: syz.1.859 Not tainted 6.13.0-syzkaller-09950-g60c828cf80c0 #0 [ 88.850312][ T5985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 88.850327][ T5985] Call Trace: [ 88.850393][ T5985] [ 88.850401][ T5985] dump_stack_lvl+0xf2/0x150 [ 88.850430][ T5985] dump_stack+0x15/0x1a [ 88.850451][ T5985] should_fail_ex+0x24a/0x260 [ 88.850562][ T5985] should_failslab+0x8f/0xb0 [ 88.850595][ T5985] kmem_cache_alloc_noprof+0x52/0x320 [ 88.850635][ T5985] ? skb_clone+0x154/0x1f0 [ 88.850665][ T5985] skb_clone+0x154/0x1f0 [ 88.850732][ T5985] __netlink_deliver_tap+0x2bd/0x4f0 [ 88.850882][ T5985] netlink_unicast+0x64a/0x670 [ 88.850923][ T5985] netlink_sendmsg+0x5cc/0x6e0 [ 88.850964][ T5985] ? __pfx_netlink_sendmsg+0x10/0x10 [ 88.851017][ T5985] __sock_sendmsg+0x140/0x180 [ 88.851121][ T5985] sock_write_iter+0x15e/0x1a0 [ 88.851205][ T5985] vfs_write+0x77b/0x920 [ 88.851226][ T5985] ? __pfx_sock_write_iter+0x10/0x10 [ 88.851280][ T5985] ksys_write+0xe8/0x1b0 [ 88.851307][ T5985] __x64_sys_write+0x42/0x50 [ 88.851328][ T5985] x64_sys_call+0x287e/0x2dc0 [ 88.851436][ T5985] do_syscall_64+0xc9/0x1c0 [ 88.851465][ T5985] ? clear_bhb_loop+0x55/0xb0 [ 88.851499][ T5985] ? clear_bhb_loop+0x55/0xb0 [ 88.851604][ T5985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.851708][ T5985] RIP: 0033:0x7f9b1f46cda9 [ 88.851723][ T5985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.851780][ T5985] RSP: 002b:00007f9b1dad7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 88.851801][ T5985] RAX: ffffffffffffffda RBX: 00007f9b1f685fa0 RCX: 00007f9b1f46cda9 [ 88.851815][ T5985] RDX: 000000000000fe33 RSI: 0000000020000000 RDI: 0000000000000003 [ 88.851809][ T5973] EXT4-fs error (device loop2): ext4_do_update_inode:5154: inode #13: comm syz.2.855: corrupted inode contents [ 88.851830][ T5985] RBP: 00007f9b1dad7090 R08: 0000000000000000 R09: 0000000000000000 [ 88.851845][ T5985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.851859][ T5985] R13: 0000000000000000 R14: 00007f9b1f685fa0 R15: 00007ffc5ba5ac68 [ 88.851898][ T5985] [ 89.072674][ T5973] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 89.086141][ T5985] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.859'. [ 89.102173][ T5973] EXT4-fs error (device loop2): ext4_do_update_inode:5154: inode #13: comm syz.2.855: corrupted inode contents [ 89.122031][ T5974] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.141930][ T5973] EXT4-fs error (device loop2): ext4_truncate:4240: inode #13: comm syz.2.855: mark_inode_dirty error [ 89.157179][ T5973] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 89.186996][ T5973] EXT4-fs (loop2): 1 truncate cleaned up [ 89.193989][ T5999] netlink: 12 bytes leftover after parsing attributes in process `syz.4.865'. [ 89.203596][ T5973] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.205386][ T5974] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.297356][ T5974] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.308848][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.327505][ T5974] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.364757][ T5974] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.381963][ T6020] loop4: detected capacity change from 0 to 2048 [ 89.399589][ T5974] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.422211][ T6020] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.436668][ T6025] loop1: detected capacity change from 0 to 1764 [ 89.438413][ T6020] EXT4-fs error (device loop4): ext4_find_extent:938: inode #2: comm syz.4.870: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 89.461244][ T6020] EXT4-fs (loop4): Remounting filesystem read-only [ 89.497039][ T3294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.548112][ T6045] netlink: 12 bytes leftover after parsing attributes in process `syz.2.876'. [ 89.619634][ T6046] loop7: detected capacity change from 0 to 16384 [ 89.701219][ T6064] FAULT_INJECTION: forcing a failure. [ 89.701219][ T6064] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 89.714368][ T6064] CPU: 1 UID: 0 PID: 6064 Comm: syz.1.879 Not tainted 6.13.0-syzkaller-09950-g60c828cf80c0 #0 [ 89.714398][ T6064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 89.714413][ T6064] Call Trace: [ 89.714421][ T6064] [ 89.714429][ T6064] dump_stack_lvl+0xf2/0x150 [ 89.714460][ T6064] dump_stack+0x15/0x1a [ 89.714485][ T6064] should_fail_ex+0x24a/0x260 [ 89.714568][ T6064] should_fail+0xb/0x10 [ 89.714602][ T6064] should_fail_usercopy+0x1a/0x20 [ 89.714620][ T6064] _copy_from_user+0x1c/0xa0 [ 89.714648][ T6064] kstrtouint_from_user+0x76/0xe0 [ 89.714749][ T6064] ? 0xffffffff81000000 [ 89.714764][ T6064] ? selinux_file_permission+0x22a/0x360 [ 89.714834][ T6064] proc_fail_nth_write+0x4f/0x150 [ 89.714863][ T6064] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 89.714892][ T6064] vfs_write+0x27d/0x920 [ 89.714955][ T6064] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 89.714982][ T6064] ? __fget_files+0x17c/0x1c0 [ 89.715090][ T6064] ksys_write+0xe8/0x1b0 [ 89.715112][ T6064] __x64_sys_write+0x42/0x50 [ 89.715138][ T6064] x64_sys_call+0x287e/0x2dc0 [ 89.715170][ T6064] do_syscall_64+0xc9/0x1c0 [ 89.715200][ T6064] ? clear_bhb_loop+0x55/0xb0 [ 89.715252][ T6064] ? clear_bhb_loop+0x55/0xb0 [ 89.715281][ T6064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.715313][ T6064] RIP: 0033:0x7f9b1f46b85f [ 89.715330][ T6064] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 89.715371][ T6064] RSP: 002b:00007f9b1dad7030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 89.715394][ T6064] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9b1f46b85f [ 89.715457][ T6064] RDX: 0000000000000001 RSI: 00007f9b1dad70a0 RDI: 0000000000000007 [ 89.715471][ T6064] RBP: 00007f9b1dad7090 R08: 0000000000000000 R09: 0000000000000000 [ 89.715485][ T6064] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 89.715497][ T6064] R13: 0000000000000000 R14: 00007f9b1f685fa0 R15: 00007ffc5ba5ac68 [ 89.715514][ T6064] [ 90.076150][ T6061] loop7: detected capacity change from 16384 to 16383 [ 90.228266][ T6133] netlink: 12 bytes leftover after parsing attributes in process `syz.1.887'. [ 90.339388][ T6140] loop1: detected capacity change from 0 to 1024 [ 90.369494][ T6140] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.501181][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.770990][ T6174] loop1: detected capacity change from 0 to 512 [ 90.791791][ T6175] loop3: detected capacity change from 0 to 1024 [ 90.803891][ T6174] ext4: Bad value for 'debug_want_extra_isize' [ 90.829371][ T6175] EXT4-fs: Ignoring removed nobh option [ 90.857280][ T6175] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 90.884604][ T6174] loop1: detected capacity change from 0 to 128 [ 90.892994][ T6175] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.914237][ T6183] loop4: detected capacity change from 0 to 1024 [ 90.959959][ T6183] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.032561][ T6186] syz.1.905: attempt to access beyond end of device [ 91.032561][ T6186] loop1: rw=0, sector=121, nr_sectors = 920 limit=128 [ 91.037140][ T6187] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(13) [ 91.052414][ T6187] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 91.060030][ T6187] vhci_hcd vhci_hcd.0: Device attached [ 91.083012][ T6188] vhci_hcd: connection closed [ 91.083379][ T6098] vhci_hcd: stop threads [ 91.092458][ T6098] vhci_hcd: release socket [ 91.096902][ T6098] vhci_hcd: disconnect device [ 91.140954][ T3294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.340186][ T6211] loop2: detected capacity change from 0 to 512 [ 91.368231][ T6211] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.381344][ T6211] ext4 filesystem being mounted at /178/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.401154][ T6211] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.917: bg 0: block 18: invalid block bitmap [ 91.441585][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.465224][ T6226] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 91.562420][ T6239] loop2: detected capacity change from 0 to 2048 [ 91.579145][ T6239] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.610879][ T6239] EXT4-fs error (device loop2): ext4_find_extent:938: inode #2: comm syz.2.930: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 91.636174][ T6239] EXT4-fs (loop2): Remounting filesystem read-only [ 91.643288][ T6243] loop1: detected capacity change from 0 to 512 [ 91.663797][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.677612][ T6243] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.691736][ T6243] ext4 filesystem being mounted at /222/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.714837][ T6243] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.931: bg 0: block 18: invalid block bitmap [ 91.742885][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.780425][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.817336][ T6257] tmpfs: Bad value for 'mpol' [ 91.824546][ T6260] netlink: 4 bytes leftover after parsing attributes in process `syz.3.934'. [ 91.836002][ T6256] bond1: entered promiscuous mode [ 91.841137][ T6256] bond1: entered allmulticast mode [ 91.841282][ T6257] loop2: detected capacity change from 0 to 512 [ 91.846756][ T6256] 8021q: adding VLAN 0 to HW filter on device bond1 [ 91.861099][ T6254] netlink: 4 bytes leftover after parsing attributes in process `syz.3.934'. [ 91.866670][ T6257] EXT4-fs: Ignoring removed oldalloc option [ 91.878617][ T6256] bond1 (unregistering): Released all slaves [ 91.896135][ T6264] sd 0:0:1:0: device reset [ 91.960520][ T6257] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.938: corrupted in-inode xattr: overlapping e_value [ 91.974962][ T6257] EXT4-fs (loop2): Remounting filesystem read-only [ 91.982210][ T6257] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.994522][ T6257] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 92.001708][ T6257] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.066181][ T6257] ALSA: seq fatal error: cannot create timer (-19) [ 92.123600][ T6275] loop1: detected capacity change from 0 to 512 [ 92.141268][ T6275] ext4: Bad value for 'debug_want_extra_isize' [ 92.163631][ T6275] loop1: detected capacity change from 0 to 128 [ 92.249067][ T6278] syz.1.942: attempt to access beyond end of device [ 92.249067][ T6278] loop1: rw=0, sector=121, nr_sectors = 920 limit=128 [ 92.269974][ T29] kauditd_printk_skb: 250 callbacks suppressed [ 92.269992][ T29] audit: type=1326 audit(2000000052.480:3750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6279 comm="syz.2.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71c7bccda9 code=0x7ffc0000 [ 92.310443][ T29] audit: type=1326 audit(2000000052.480:3751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6279 comm="syz.2.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71c7bccda9 code=0x7ffc0000 [ 92.333892][ T29] audit: type=1326 audit(2000000052.480:3752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6279 comm="syz.2.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f71c7bccda9 code=0x7ffc0000 [ 92.357374][ T29] audit: type=1326 audit(2000000052.510:3753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6279 comm="syz.2.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71c7bccda9 code=0x7ffc0000 [ 92.381178][ T29] audit: type=1326 audit(2000000052.510:3754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6279 comm="syz.2.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f71c7bccda9 code=0x7ffc0000 [ 92.404806][ T29] audit: type=1326 audit(2000000052.510:3755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6279 comm="syz.2.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71c7bccda9 code=0x7ffc0000 [ 92.428295][ T29] audit: type=1326 audit(2000000052.510:3756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6279 comm="syz.2.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f71c7bcecc7 code=0x7ffc0000 [ 92.451779][ T29] audit: type=1326 audit(2000000052.510:3757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6279 comm="syz.2.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71c7bccda9 code=0x7ffc0000 [ 92.475373][ T29] audit: type=1326 audit(2000000052.510:3758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6279 comm="syz.2.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f71c7bcb710 code=0x7ffc0000 [ 92.498824][ T29] audit: type=1326 audit(2000000052.510:3759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6279 comm="syz.2.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71c7bccda9 code=0x7ffc0000 [ 92.610540][ T6298] tmpfs: Bad value for 'mpol' [ 92.618016][ T6298] loop2: detected capacity change from 0 to 512 [ 92.624525][ T6298] EXT4-fs: Ignoring removed oldalloc option [ 92.633238][ T6298] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.953: corrupted in-inode xattr: overlapping e_value [ 92.647522][ T6298] EXT4-fs (loop2): Remounting filesystem read-only [ 92.654352][ T6298] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.666641][ T6298] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 92.673561][ T6298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.699160][ T6298] ALSA: seq fatal error: cannot create timer (-19) [ 92.724336][ T6304] loop2: detected capacity change from 0 to 512 [ 92.731006][ T6304] ext4: Bad value for 'debug_want_extra_isize' [ 92.740709][ T6304] loop2: detected capacity change from 0 to 128 [ 92.818491][ T6305] syz.2.954: attempt to access beyond end of device [ 92.818491][ T6305] loop2: rw=0, sector=121, nr_sectors = 920 limit=128 [ 92.979079][ T6310] loop1: detected capacity change from 0 to 128 [ 92.991414][ T6310] FAULT_INJECTION: forcing a failure. [ 92.991414][ T6310] name failslab, interval 1, probability 0, space 0, times 0 [ 93.004124][ T6310] CPU: 0 UID: 0 PID: 6310 Comm: syz.1.956 Not tainted 6.13.0-syzkaller-09950-g60c828cf80c0 #0 [ 93.004199][ T6310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 93.004215][ T6310] Call Trace: [ 93.004221][ T6310] [ 93.004229][ T6310] dump_stack_lvl+0xf2/0x150 [ 93.004261][ T6310] dump_stack+0x15/0x1a [ 93.004283][ T6310] should_fail_ex+0x24a/0x260 [ 93.004386][ T6310] should_failslab+0x8f/0xb0 [ 93.004418][ T6310] kmem_cache_alloc_noprof+0x52/0x320 [ 93.004456][ T6310] ? io_submit_one+0xb7/0x1230 [ 93.004527][ T6310] io_submit_one+0xb7/0x1230 [ 93.004566][ T6310] ? __rcu_read_unlock+0x4e/0x70 [ 93.004592][ T6310] __se_sys_io_submit+0xf5/0x280 [ 93.004619][ T6310] __x64_sys_io_submit+0x43/0x50 [ 93.004724][ T6310] x64_sys_call+0x2c20/0x2dc0 [ 93.004754][ T6310] do_syscall_64+0xc9/0x1c0 [ 93.004809][ T6310] ? clear_bhb_loop+0x55/0xb0 [ 93.004887][ T6310] ? clear_bhb_loop+0x55/0xb0 [ 93.004976][ T6310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.005080][ T6310] RIP: 0033:0x7f9b1f46cda9 [ 93.005099][ T6310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.005122][ T6310] RSP: 002b:00007f9b1dad7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 93.005143][ T6310] RAX: ffffffffffffffda RBX: 00007f9b1f685fa0 RCX: 00007f9b1f46cda9 [ 93.005165][ T6310] RDX: 0000000020001d00 RSI: 0000000000000002 RDI: 00007f9b201c5000 [ 93.005177][ T6310] RBP: 00007f9b1dad7090 R08: 0000000000000000 R09: 0000000000000000 [ 93.005188][ T6310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.005200][ T6310] R13: 0000000000000000 R14: 00007f9b1f685fa0 R15: 00007ffc5ba5ac68 [ 93.005292][ T6310] [ 93.188459][ T6312] loop4: detected capacity change from 0 to 128 [ 93.195032][ T6312] vfat: Unknown parameter 'm^.pܟ' [ 93.299264][ T6314] loop1: detected capacity change from 0 to 1024 [ 93.313083][ T6314] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.355251][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.393778][ T6320] loop1: detected capacity change from 0 to 2048 [ 93.418999][ T6320] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.432256][ T6320] EXT4-fs error (device loop1): ext4_find_extent:938: inode #2: comm syz.1.960: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 93.449186][ T6320] EXT4-fs (loop1): Remounting filesystem read-only [ 93.548162][ T6330] loop0: detected capacity change from 0 to 512 [ 93.567189][ T6330] EXT4-fs: Ignoring removed oldalloc option [ 93.577039][ T6330] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.964: corrupted in-inode xattr: overlapping e_value [ 93.610470][ T6330] EXT4-fs (loop0): Remounting filesystem read-only [ 93.653363][ T6330] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 93.683275][ T6330] ALSA: seq fatal error: cannot create timer (-19) [ 93.734206][ T6342] loop0: detected capacity change from 0 to 512 [ 93.748154][ T6342] ext4: Bad value for 'debug_want_extra_isize' [ 93.764091][ T6346] loop2: detected capacity change from 0 to 1024 [ 93.779036][ T6342] loop0: detected capacity change from 0 to 128 [ 93.937248][ T6352] syz.0.968: attempt to access beyond end of device [ 93.937248][ T6352] loop0: rw=0, sector=121, nr_sectors = 920 limit=128 [ 93.998242][ T6357] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 94.202205][ T6365] loop3: detected capacity change from 0 to 512 [ 94.218425][ T6365] ext4: Bad value for 'debug_want_extra_isize' [ 94.229342][ T6365] loop3: detected capacity change from 0 to 128 [ 94.318017][ T6370] syz.3.978: attempt to access beyond end of device [ 94.318017][ T6370] loop3: rw=0, sector=121, nr_sectors = 920 limit=128 [ 94.334340][ T6372] loop1: detected capacity change from 0 to 512 [ 94.342136][ T6372] ext4: Bad value for 'debug_want_extra_isize' [ 94.373061][ T6372] loop1: detected capacity change from 0 to 128 [ 94.433937][ T6374] loop4: detected capacity change from 0 to 1024 [ 94.459043][ T6376] syz.1.981: attempt to access beyond end of device [ 94.459043][ T6376] loop1: rw=0, sector=121, nr_sectors = 920 limit=128 [ 94.609237][ T6384] loop0: detected capacity change from 0 to 164 [ 94.647156][ T6384] Unable to read rock-ridge attributes [ 94.657441][ T6384] Unable to read rock-ridge attributes [ 94.674557][ T6384] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 94.694176][ T6384] netlink: 28 bytes leftover after parsing attributes in process `syz.0.986'. [ 94.888463][ T6392] loop4: detected capacity change from 0 to 512 [ 94.901304][ T6392] ext4: Bad value for 'debug_want_extra_isize' [ 94.924068][ T6392] loop4: detected capacity change from 0 to 128 [ 95.020800][ T6398] syz.4.990: attempt to access beyond end of device [ 95.020800][ T6398] loop4: rw=0, sector=121, nr_sectors = 920 limit=128 [ 95.275338][ T6420] FAULT_INJECTION: forcing a failure. [ 95.275338][ T6420] name failslab, interval 1, probability 0, space 0, times 0 [ 95.288096][ T6420] CPU: 1 UID: 0 PID: 6420 Comm: syz.3.1002 Not tainted 6.13.0-syzkaller-09950-g60c828cf80c0 #0 [ 95.288120][ T6420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 95.288133][ T6420] Call Trace: [ 95.288139][ T6420] [ 95.288147][ T6420] dump_stack_lvl+0xf2/0x150 [ 95.288251][ T6420] dump_stack+0x15/0x1a [ 95.288277][ T6420] should_fail_ex+0x24a/0x260 [ 95.288374][ T6420] should_failslab+0x8f/0xb0 [ 95.288406][ T6420] kmem_cache_alloc_node_noprof+0x59/0x320 [ 95.288448][ T6420] ? __alloc_skb+0x10b/0x310 [ 95.288480][ T6420] __alloc_skb+0x10b/0x310 [ 95.288511][ T6420] tipc_msg_build+0xc6/0x820 [ 95.288570][ T6420] ? bpf_probe_read_compat_str+0xf8/0x130 [ 95.288609][ T6420] ? __rcu_read_unlock+0x4e/0x70 [ 95.288675][ T6420] tipc_send_group_bcast+0x5b9/0x6c0 [ 95.288719][ T6420] ? __pfx_woken_wake_function+0x10/0x10 [ 95.288753][ T6420] __tipc_sendmsg+0x1a9/0x1c40 [ 95.288846][ T6420] ? selinux_socket_sendmsg+0x185/0x1c0 [ 95.288882][ T6420] ? _raw_spin_unlock_bh+0x36/0x40 [ 95.288923][ T6420] ? lock_sock_nested+0x10f/0x140 [ 95.289007][ T6420] ? __pfx_tipc_sendmsg+0x10/0x10 [ 95.289127][ T6420] tipc_sendmsg+0x3e/0x60 [ 95.289167][ T6420] __sock_sendmsg+0x140/0x180 [ 95.289196][ T6420] ____sys_sendmsg+0x312/0x410 [ 95.289235][ T6420] __sys_sendmsg+0x19d/0x230 [ 95.289343][ T6420] __x64_sys_sendmsg+0x46/0x50 [ 95.289378][ T6420] x64_sys_call+0x2734/0x2dc0 [ 95.289405][ T6420] do_syscall_64+0xc9/0x1c0 [ 95.289429][ T6420] ? clear_bhb_loop+0x55/0xb0 [ 95.289463][ T6420] ? clear_bhb_loop+0x55/0xb0 [ 95.289497][ T6420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.289523][ T6420] RIP: 0033:0x7fd4c8d2cda9 [ 95.289537][ T6420] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.289629][ T6420] RSP: 002b:00007fd4c7391038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 95.289698][ T6420] RAX: ffffffffffffffda RBX: 00007fd4c8f45fa0 RCX: 00007fd4c8d2cda9 [ 95.289712][ T6420] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000007 [ 95.289727][ T6420] RBP: 00007fd4c7391090 R08: 0000000000000000 R09: 0000000000000000 [ 95.289742][ T6420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.289764][ T6420] R13: 0000000000000000 R14: 00007fd4c8f45fa0 R15: 00007ffe4fd55318 [ 95.289819][ T6420] [ 95.295548][ T6418] loop2: detected capacity change from 0 to 2048 [ 95.829108][ T6445] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 95.841802][ T6445] vhci_hcd: default hub control req: d300 v0000 i0000 l0 [ 95.851865][ T6455] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 95.891152][ T6457] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 96.031202][ T6467] loop2: detected capacity change from 0 to 128 [ 96.067506][ T6467] FAT-fs (loop2): error, corrupted directory (invalid i_start) [ 96.075170][ T6467] FAT-fs (loop2): Filesystem has been set read-only [ 96.086223][ T6471] loop4: detected capacity change from 0 to 512 [ 96.109672][ T6471] ext4 filesystem being mounted at /195/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.143901][ T6471] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.1020: Failed to acquire dquot type 0 [ 96.204869][ T6483] loop4: detected capacity change from 0 to 512 [ 96.239521][ T6483] ext4 filesystem being mounted at /196/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.258743][ T6483] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.1025: bg 0: block 18: invalid block bitmap [ 96.688254][ T6522] IPv4: Oversized IP packet from 127.202.26.0 [ 96.834568][ T6536] loop3: detected capacity change from 0 to 512 [ 96.866294][ T6536] EXT4-fs: inline encryption not supported [ 96.880935][ T6536] ext4 filesystem being mounted at /188/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.379794][ T29] kauditd_printk_skb: 135 callbacks suppressed [ 97.379811][ T29] audit: type=1326 audit(2000000057.590:3893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6549 comm="syz.2.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71c7bccda9 code=0x7ffc0000 [ 97.418034][ T29] audit: type=1326 audit(2000000057.590:3894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6549 comm="syz.2.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71c7bccda9 code=0x7ffc0000 [ 97.441632][ T29] audit: type=1326 audit(2000000057.590:3895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6549 comm="syz.2.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f71c7bccda9 code=0x7ffc0000 [ 97.465084][ T29] audit: type=1326 audit(2000000057.590:3896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6549 comm="syz.2.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71c7bccda9 code=0x7ffc0000 [ 97.488719][ T29] audit: type=1326 audit(2000000057.590:3897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6549 comm="syz.2.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71c7bccda9 code=0x7ffc0000 [ 97.512220][ T29] audit: type=1326 audit(2000000057.590:3898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6549 comm="syz.2.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f71c7bccda9 code=0x7ffc0000 [ 97.535666][ T29] audit: type=1326 audit(2000000057.590:3899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6549 comm="syz.2.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71c7bccda9 code=0x7ffc0000 [ 97.541811][ T6561] IPv4: Oversized IP packet from 127.202.26.0 [ 97.559223][ T29] audit: type=1326 audit(2000000057.590:3900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6549 comm="syz.2.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71c7bccda9 code=0x7ffc0000 [ 97.588835][ T29] audit: type=1326 audit(2000000057.590:3901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6549 comm="syz.2.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f71c7bccda9 code=0x7ffc0000 [ 97.612267][ T29] audit: type=1326 audit(2000000057.590:3902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6549 comm="syz.2.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71c7bccda9 code=0x7ffc0000 [ 97.684200][ T6569] netlink: 'syz.0.1056': attribute type 9 has an invalid length. [ 97.692035][ T6569] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.1056'. [ 97.713886][ T6552] blk_print_req_error: 14 callbacks suppressed [ 97.713905][ T6552] I/O error, dev loop7, sector 5376 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 97.732293][ T6552] I/O error, dev loop7, sector 5632 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 97.742475][ T6552] I/O error, dev loop7, sector 5376 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 97.751955][ T6552] buffer_io_error: 1834 callbacks suppressed [ 97.751966][ T6552] Buffer I/O error on dev loop7, logical block 5376, async page read [ 97.767118][ T6552] I/O error, dev loop7, sector 5377 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 97.776604][ T6552] Buffer I/O error on dev loop7, logical block 5377, async page read [ 97.785180][ T6552] I/O error, dev loop7, sector 5378 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 97.794703][ T6552] Buffer I/O error on dev loop7, logical block 5378, async page read [ 97.803394][ T6552] I/O error, dev loop7, sector 5379 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 97.813159][ T6552] Buffer I/O error on dev loop7, logical block 5379, async page read [ 97.829629][ T6552] I/O error, dev loop7, sector 5380 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 97.839167][ T6552] Buffer I/O error on dev loop7, logical block 5380, async page read [ 97.847574][ T6552] I/O error, dev loop7, sector 5381 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 97.857059][ T6552] Buffer I/O error on dev loop7, logical block 5381, async page read [ 97.877187][ T6552] I/O error, dev loop7, sector 5382 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 97.886744][ T6552] Buffer I/O error on dev loop7, logical block 5382, async page read [ 97.895031][ T6552] I/O error, dev loop7, sector 5383 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 97.904696][ T6552] Buffer I/O error on dev loop7, logical block 5383, async page read [ 97.955441][ T6548] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 97.963899][ T6548] Buffer I/O error on dev loop7, logical block 1, lost async page write [ 98.314874][ T6598] loop0: detected capacity change from 0 to 512 [ 98.366754][ T6598] ext4 filesystem being mounted at /204/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.388459][ T6609] IPv4: Oversized IP packet from 127.202.26.0 [ 98.433052][ T6612] loop4: detected capacity change from 0 to 128 [ 98.467640][ T6598] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.1065: bg 0: block 18: invalid block bitmap [ 98.481790][ T6612] netlink: 'syz.4.1073': attribute type 12 has an invalid length. [ 98.489837][ T6612] netlink: 'syz.4.1073': attribute type 29 has an invalid length. [ 98.497771][ T6612] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1073'. [ 98.497821][ T6612] netlink: 'syz.4.1073': attribute type 1 has an invalid length. [ 98.497836][ T6612] netlink: 47 bytes leftover after parsing attributes in process `syz.4.1073'. [ 98.709931][ T6647] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1083'. [ 98.743677][ T6651] IPv4: Oversized IP packet from 127.202.26.0 [ 98.804249][ T6655] loop4: detected capacity change from 0 to 1024 [ 98.822817][ T6655] EXT4-fs mount: 17 callbacks suppressed [ 98.822833][ T6655] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.874436][ T6658] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1089'. [ 98.884841][ T6658] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1089'. [ 98.886197][ T3294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.930194][ T6658] netlink: 'syz.2.1089': attribute type 10 has an invalid length. [ 98.938717][ T6658] team0: Device hsr_slave_0 failed to register rx_handler [ 98.948085][ T6665] sd 0:0:1:0: device reset [ 99.012981][ T6671] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1094'. [ 99.022661][ T6671] FAULT_INJECTION: forcing a failure. [ 99.022661][ T6671] name failslab, interval 1, probability 0, space 0, times 0 [ 99.035483][ T6671] CPU: 1 UID: 0 PID: 6671 Comm: syz.2.1094 Not tainted 6.13.0-syzkaller-09950-g60c828cf80c0 #0 [ 99.035514][ T6671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 99.035528][ T6671] Call Trace: [ 99.035535][ T6671] [ 99.035544][ T6671] dump_stack_lvl+0xf2/0x150 [ 99.035621][ T6671] dump_stack+0x15/0x1a [ 99.035645][ T6671] should_fail_ex+0x24a/0x260 [ 99.035755][ T6671] ? __hw_addr_add_ex+0x13d/0x360 [ 99.035853][ T6671] should_failslab+0x8f/0xb0 [ 99.035884][ T6671] __kmalloc_cache_noprof+0x4e/0x320 [ 99.035932][ T6671] __hw_addr_add_ex+0x13d/0x360 [ 99.035955][ T6671] dev_addr_init+0xb2/0x120 [ 99.035980][ T6671] alloc_netdev_mqs+0x1e1/0xa20 [ 99.036058][ T6671] ? __pfx_batadv_softif_init_early+0x10/0x10 [ 99.036086][ T6671] rtnl_create_link+0x233/0x680 [ 99.036114][ T6671] rtnl_newlink_create+0x133/0x5d0 [ 99.036188][ T6671] ? __schedule+0x75b/0x990 [ 99.036222][ T6671] rtnl_newlink+0xe9f/0x1250 [ 99.036329][ T6671] ? xa_load+0xb9/0xe0 [ 99.036358][ T6671] ? memcg_list_lru_alloc+0xce/0x4e0 [ 99.036392][ T6671] ? mod_objcg_state+0x2ea/0x4f0 [ 99.036442][ T6671] ? mod_objcg_state+0x2ea/0x4f0 [ 99.036539][ T6671] ? __rcu_read_unlock+0x4e/0x70 [ 99.036565][ T6671] ? avc_has_perm_noaudit+0x1cc/0x210 [ 99.036634][ T6671] ? selinux_capable+0x1f2/0x260 [ 99.036673][ T6671] ? security_capable+0x81/0x90 [ 99.036697][ T6671] ? ns_capable+0x7d/0xb0 [ 99.036759][ T6671] ? __pfx_rtnl_newlink+0x10/0x10 [ 99.036872][ T6671] rtnetlink_rcv_msg+0x651/0x710 [ 99.036908][ T6671] ? avc_has_perm_noaudit+0x1cc/0x210 [ 99.036942][ T6671] netlink_rcv_skb+0x12c/0x230 [ 99.036993][ T6671] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 99.037036][ T6671] rtnetlink_rcv+0x1c/0x30 [ 99.037063][ T6671] netlink_unicast+0x599/0x670 [ 99.037102][ T6671] netlink_sendmsg+0x5cc/0x6e0 [ 99.037154][ T6671] ? __pfx_netlink_sendmsg+0x10/0x10 [ 99.037186][ T6671] __sock_sendmsg+0x140/0x180 [ 99.037205][ T6671] ____sys_sendmsg+0x312/0x410 [ 99.037242][ T6671] __sys_sendmsg+0x19d/0x230 [ 99.037374][ T6671] __x64_sys_sendmsg+0x46/0x50 [ 99.037472][ T6671] x64_sys_call+0x2734/0x2dc0 [ 99.037500][ T6671] do_syscall_64+0xc9/0x1c0 [ 99.037530][ T6671] ? clear_bhb_loop+0x55/0xb0 [ 99.037671][ T6671] ? clear_bhb_loop+0x55/0xb0 [ 99.037726][ T6671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.037752][ T6671] RIP: 0033:0x7f71c7bccda9 [ 99.037766][ T6671] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.037788][ T6671] RSP: 002b:00007f71c6237038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 99.037810][ T6671] RAX: ffffffffffffffda RBX: 00007f71c7de5fa0 RCX: 00007f71c7bccda9 [ 99.037902][ T6671] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000006 [ 99.037982][ T6671] RBP: 00007f71c6237090 R08: 0000000000000000 R09: 0000000000000000 [ 99.037993][ T6671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.038004][ T6671] R13: 0000000000000000 R14: 00007f71c7de5fa0 R15: 00007ffd95d012b8 [ 99.038022][ T6671] [ 99.427243][ T6677] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 99.623713][ T6697] loop2: detected capacity change from 0 to 512 [ 99.659234][ T6697] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1105: bg 0: block 248: padding at end of block bitmap is not set [ 99.683613][ T6697] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.1105: Failed to acquire dquot type 1 [ 99.695204][ T6705] loop3: detected capacity change from 0 to 512 [ 99.696081][ T6697] EXT4-fs (loop2): 1 truncate cleaned up [ 99.708407][ T6697] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.721421][ T6697] ext4 filesystem being mounted at /230/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 99.732215][ T6697] FAULT_INJECTION: forcing a failure. [ 99.732215][ T6697] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 99.739247][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 99.745311][ T6697] CPU: 0 UID: 0 PID: 6697 Comm: syz.2.1105 Not tainted 6.13.0-syzkaller-09950-g60c828cf80c0 #0 [ 99.745390][ T6697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 99.745405][ T6697] Call Trace: [ 99.745415][ T6697] [ 99.745426][ T6697] dump_stack_lvl+0xf2/0x150 [ 99.745459][ T6697] dump_stack+0x15/0x1a [ 99.745486][ T6697] should_fail_ex+0x24a/0x260 [ 99.745571][ T6697] should_fail+0xb/0x10 [ 99.745617][ T6697] should_fail_usercopy+0x1a/0x20 [ 99.745642][ T6697] strncpy_from_user+0x25/0x210 [ 99.745673][ T6697] ? kmem_cache_alloc_noprof+0x295/0x320 [ 99.745713][ T6697] ? getname_flags+0x81/0x3b0 [ 99.745809][ T6697] getname_flags+0xb0/0x3b0 [ 99.745886][ T6697] user_path_at+0x26/0x120 [ 99.745998][ T6697] do_fchownat+0x92/0x1a0 [ 99.746033][ T6697] __x64_sys_lchown+0x4a/0x60 [ 99.746067][ T6697] x64_sys_call+0x1e29/0x2dc0 [ 99.746136][ T6697] do_syscall_64+0xc9/0x1c0 [ 99.746166][ T6697] ? clear_bhb_loop+0x55/0xb0 [ 99.746199][ T6697] ? clear_bhb_loop+0x55/0xb0 [ 99.746232][ T6697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.746332][ T6697] RIP: 0033:0x7f71c7bccda9 [ 99.746351][ T6697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.746373][ T6697] RSP: 002b:00007f71c6237038 EFLAGS: 00000246 ORIG_RAX: 000000000000005e [ 99.746395][ T6697] RAX: ffffffffffffffda RBX: 00007f71c7de5fa0 RCX: 00007f71c7bccda9 [ 99.746410][ T6697] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 99.746425][ T6697] RBP: 00007f71c6237090 R08: 0000000000000000 R09: 0000000000000000 [ 99.746456][ T6697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.746471][ T6697] R13: 0000000000000000 R14: 00007f71c7de5fa0 R15: 00007ffd95d012b8 [ 99.746498][ T6697] [ 99.836852][ T6705] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1108: bg 0: block 248: padding at end of block bitmap is not set [ 99.840485][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 99.845317][ T6705] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.1108: Failed to acquire dquot type 1 [ 99.849764][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 99.855328][ T6705] EXT4-fs (loop3): 1 truncate cleaned up [ 99.861307][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 99.865784][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.884556][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 99.897925][ T6705] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.901273][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 99.909383][ T6705] ext4 filesystem being mounted at /199/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 99.918187][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 99.988203][ T6710] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 99.991113][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 100.060309][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 100.067853][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 100.075276][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 100.081360][ T6713] loop2: detected capacity change from 0 to 2048 [ 100.082748][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 100.082771][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 100.104185][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 100.113527][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 100.121043][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 100.128464][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 100.136031][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 100.143425][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 100.151012][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 100.158452][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 100.165847][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 100.173287][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 100.180728][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 100.188167][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 100.195655][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 100.203090][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 100.210532][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 100.218025][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 100.225768][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 100.233788][ T24] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 100.246812][ T4489] loop2: p1 < > p4 [ 100.251269][ T4489] loop2: p4 size 8388608 extends beyond EOD, truncated [ 100.264741][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.276657][ T6713] loop2: p1 < > p4 [ 100.282654][ T6713] loop2: p4 size 8388608 extends beyond EOD, truncated [ 100.458432][ T6719] netlink: 'syz.4.1113': attribute type 4 has an invalid length. [ 100.476544][ T6723] loop1: detected capacity change from 0 to 1024 [ 100.514072][ T6723] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.590331][ T2998] loop2: p1 < > p4 [ 100.604932][ T2998] loop2: p4 size 8388608 extends beyond EOD, truncated [ 100.641455][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.696466][ T4489] udevd[4489]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 100.697710][ T3373] udevd[3373]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 100.723367][ T6741] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 100.737827][ T6745] loop3: detected capacity change from 0 to 128 [ 100.761867][ T6745] ext2: Unknown parameter 'mask' [ 100.801196][ T6745] loop3: detected capacity change from 0 to 512 [ 100.807883][ T6745] EXT4-fs: Ignoring removed nobh option [ 100.824140][ T6745] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 100.832735][ T6754] loop2: detected capacity change from 0 to 512 [ 100.838278][ T6745] EXT4-fs error (device loop3): ext4_orphan_get:1389: inode #13: comm syz.3.1123: casefold flag without casefold feature [ 100.852292][ T6745] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.1123: couldn't read orphan inode 13 (err -117) [ 100.865174][ T6745] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.880889][ T6745] EXT4-fs warning (device loop3): ext4_lookup:1825: Inconsistent encryption contexts: 2/12 [ 100.892330][ T6754] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.905526][ T6754] ext4 filesystem being mounted at /234/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.932962][ T6754] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.1126: bg 0: block 18: invalid block bitmap [ 100.948193][ T6761] loop1: detected capacity change from 0 to 512 [ 100.955063][ T6761] ext4: Bad value for 'debug_want_extra_isize' [ 100.982494][ T6761] loop1: detected capacity change from 0 to 128 [ 100.998952][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.055041][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.065465][ T6764] loop2: detected capacity change from 0 to 1024 [ 101.077976][ T6764] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.093028][ T6768] syz.1.1127: attempt to access beyond end of device [ 101.093028][ T6768] loop1: rw=0, sector=121, nr_sectors = 920 limit=128 [ 101.143223][ T6779] loop3: detected capacity change from 0 to 512 [ 101.149958][ T6779] EXT4-fs: inline encryption not supported [ 101.168446][ T6779] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.182735][ T6779] ext4 filesystem being mounted at /205/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.196139][ T6779] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #2: comm syz.3.1130: corrupted inode contents [ 101.208327][ T6779] EXT4-fs error (device loop3): ext4_dirty_inode:6042: inode #2: comm syz.3.1130: mark_inode_dirty error [ 101.220279][ T6779] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #2: comm syz.3.1130: corrupted inode contents [ 101.233496][ T6779] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #2: comm syz.3.1130: corrupted inode contents [ 101.245846][ T6779] EXT4-fs error (device loop3): ext4_dirty_inode:6042: inode #2: comm syz.3.1130: mark_inode_dirty error [ 101.258812][ T6779] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #2: comm syz.3.1130: corrupted inode contents [ 101.271120][ T6779] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #2: comm syz.3.1130: mark_inode_dirty error [ 101.282738][ T6779] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #2: comm syz.3.1130: corrupted inode contents [ 101.295885][ T6779] EXT4-fs error (device loop3): ext4_dirty_inode:6042: inode #2: comm syz.3.1130: mark_inode_dirty error [ 101.320911][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.350294][ T6801] loop3: detected capacity change from 0 to 1024 [ 101.367989][ T6801] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.399828][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.601948][ T6814] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 101.648475][ T6818] loop4: detected capacity change from 0 to 512 [ 101.668779][ T6818] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.681653][ T6818] ext4 filesystem being mounted at /220/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.696523][ T6818] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.1138: bg 0: block 18: invalid block bitmap [ 101.721881][ T3294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.745730][ T6826] loop4: detected capacity change from 0 to 512 [ 101.752597][ T6826] EXT4-fs: Ignoring removed oldalloc option [ 101.760430][ T6826] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.1141: corrupted in-inode xattr: overlapping e_value [ 101.774735][ T6826] EXT4-fs (loop4): Remounting filesystem read-only [ 101.782019][ T6826] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.794064][ T6826] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 101.801284][ T6826] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.859349][ T6826] ALSA: seq fatal error: cannot create timer (-19) [ 101.901445][ T6836] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1145'. [ 102.011542][ T6839] atomic_op ffff88811d049928 conn xmit_atomic 0000000000000000 [ 102.143916][ T6853] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1153'. [ 102.195812][ T6855] loop3: detected capacity change from 0 to 2048 [ 102.241098][ T6855] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.265484][ T6865] loop0: detected capacity change from 0 to 512 [ 102.283867][ T6865] EXT4-fs: Ignoring removed oldalloc option [ 102.285519][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.324793][ T6865] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.1158: corrupted in-inode xattr: overlapping e_value [ 102.352023][ T6865] EXT4-fs (loop0): Remounting filesystem read-only [ 102.365107][ T6865] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.377454][ T6865] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 102.384463][ T6865] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.406070][ T6878] tipc: New replicast peer: 255.255.255.255 [ 102.412253][ T6878] tipc: Enabled bearer , priority 10 [ 102.508732][ T6865] ALSA: seq fatal error: cannot create timer (-19) [ 102.627819][ T29] kauditd_printk_skb: 248 callbacks suppressed [ 102.627837][ T29] audit: type=1326 audit(2000000062.840:4147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6887 comm="syz.4.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce289acda9 code=0x7ffc0000 [ 102.657827][ T29] audit: type=1326 audit(2000000062.840:4148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6887 comm="syz.4.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce289acda9 code=0x7ffc0000 [ 102.681924][ T29] audit: type=1326 audit(2000000062.870:4149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6887 comm="syz.4.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce289acda9 code=0x7ffc0000 [ 102.705493][ T29] audit: type=1326 audit(2000000062.870:4150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6887 comm="syz.4.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce289acda9 code=0x7ffc0000 [ 102.728959][ T29] audit: type=1326 audit(2000000062.870:4151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6887 comm="syz.4.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce289acda9 code=0x7ffc0000 [ 102.747576][ T6888] loop7: detected capacity change from 0 to 16384 [ 102.756206][ T29] audit: type=1326 audit(2000000062.940:4152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6887 comm="syz.4.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce289acda9 code=0x7ffc0000 [ 102.782412][ T29] audit: type=1326 audit(2000000062.940:4153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6887 comm="syz.4.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fce289acda9 code=0x7ffc0000 [ 102.805894][ T29] audit: type=1326 audit(2000000062.940:4154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6887 comm="syz.4.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce289acda9 code=0x7ffc0000 [ 102.829551][ T29] audit: type=1326 audit(2000000062.940:4155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6887 comm="syz.4.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce289acda9 code=0x7ffc0000 [ 102.853059][ T29] audit: type=1326 audit(2000000062.940:4156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6887 comm="syz.4.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fce289acda9 code=0x7ffc0000 [ 102.891308][ T6891] sd 0:0:1:0: device reset [ 103.015122][ T6900] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1170'. [ 103.066561][ T6896] loop7: detected capacity change from 16384 to 16383 [ 103.422639][ T6929] sd 0:0:1:0: device reset [ 103.479287][ T6934] loop1: detected capacity change from 0 to 512 [ 103.500651][ T6934] ext4: Bad value for 'debug_want_extra_isize' [ 103.548863][ T6934] loop1: detected capacity change from 0 to 128 [ 103.643266][ T6949] syz.1.1186: attempt to access beyond end of device [ 103.643266][ T6949] loop1: rw=0, sector=121, nr_sectors = 920 limit=128 [ 103.829797][ T6957] loop4: detected capacity change from 0 to 1024 [ 103.874547][ T6957] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.904693][ T3294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.960637][ T6966] loop4: detected capacity change from 0 to 512 [ 103.993480][ T6966] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.021091][ T6966] ext4 filesystem being mounted at /233/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.073049][ T6966] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.1199: bg 0: block 18: invalid block bitmap [ 104.098288][ T6974] loop7: detected capacity change from 0 to 16384 [ 104.110016][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.180800][ T6984] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1204'. [ 104.189878][ T6984] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1204'. [ 104.215038][ T3294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.306053][ T6987] loop7: detected capacity change from 16384 to 16383 [ 104.333847][ T6974] blk_print_req_error: 1058 callbacks suppressed [ 104.333867][ T6974] I/O error, dev loop7, sector 6144 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 104.364589][ T2998] ================================================================== [ 104.372897][ T2998] BUG: KCSAN: data-race in set_nlink / set_nlink [ 104.379324][ T2998] [ 104.381661][ T2998] read to 0xffff88810609d120 of 4 bytes by task 4489 on cpu 1: [ 104.387715][ T6987] I/O error, dev loop7, sector 2816 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 104.389312][ T2998] set_nlink+0x2b/0xb0 [ 104.399251][ T6987] buffer_io_error: 5374 callbacks suppressed [ 104.399266][ T6987] Buffer I/O error on dev loop7, logical block 352, lost async page write [ 104.403249][ T2998] kernfs_iop_permission+0x1c8/0x210 [ 104.409362][ T6987] Buffer I/O error on dev loop7, logical block 353, lost async page write [ 104.417787][ T2998] inode_permission+0x18c/0x300 [ 104.417827][ T2998] link_path_walk+0x13e/0x830 [ 104.417857][ T2998] path_openat+0x1af/0x1fc0 [ 104.423174][ T6987] Buffer I/O error on dev loop7, logical block 354, lost async page write [ 104.431615][ T2998] do_filp_open+0x107/0x230 [ 104.431646][ T2998] do_sys_openat2+0xab/0x120 [ 104.436556][ T6987] Buffer I/O error on dev loop7, logical block 355, lost async page write [ 104.441166][ T2998] __x64_sys_openat+0xf3/0x120 [ 104.445671][ T6987] Buffer I/O error on dev loop7, logical block 356, lost async page write [ 104.454139][ T2998] x64_sys_call+0x2b30/0x2dc0 [ 104.454171][ T2998] do_syscall_64+0xc9/0x1c0 [ 104.454198][ T2998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.458727][ T6987] Buffer I/O error on dev loop7, logical block 357, lost async page write [ 104.463263][ T2998] [ 104.463271][ T2998] write to 0xffff88810609d120 of 4 bytes by task 2998 on cpu 0: [ 104.463287][ T2998] set_nlink+0x98/0xb0 [ 104.463310][ T2998] kernfs_iop_permission+0x1c8/0x210 [ 104.463329][ T2998] inode_permission+0x18c/0x300 [ 104.471854][ T6987] Buffer I/O error on dev loop7, logical block 358, lost async page write [ 104.476574][ T2998] link_path_walk+0x13e/0x830 [ 104.485088][ T6987] Buffer I/O error on dev loop7, logical block 359, lost async page write [ 104.489739][ T2998] path_lookupat+0x72/0x2b0 [ 104.489776][ T2998] filename_lookup+0x150/0x340 [ 104.494289][ T6987] Buffer I/O error on dev loop7, logical block 360, lost async page write [ 104.500162][ T2998] vfs_statx+0x9a/0x170 [ 104.500196][ T2998] __se_sys_newfstatat+0xdc/0x300 [ 104.508705][ T6987] Buffer I/O error on dev loop7, logical block 361, lost async page write [ 104.510985][ T2998] __x64_sys_newfstatat+0x55/0x70 [ 104.595424][ T2998] x64_sys_call+0x236d/0x2dc0 [ 104.600176][ T2998] do_syscall_64+0xc9/0x1c0 [ 104.604695][ T2998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.610868][ T2998] [ 104.613205][ T2998] value changed: 0x00000009 -> 0x00000008 [ 104.618947][ T2998] [ 104.621283][ T2998] Reported by Kernel Concurrency Sanitizer on: [ 104.627460][ T2998] CPU: 0 UID: 0 PID: 2998 Comm: udevd Not tainted 6.13.0-syzkaller-09950-g60c828cf80c0 #0 [ 104.637394][ T2998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 104.647473][ T2998] ================================================================== [ 104.655825][ T6974] I/O error, dev loop7, sector 6144 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 104.683600][ T6987] I/O error, dev loop7, sector 3840 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 104.704632][ T6987] I/O error, dev loop7, sector 4864 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 104.747838][ T6987] I/O error, dev loop7, sector 5888 op 0x1:(WRITE) flags 0x800 phys_seg 32 prio class 0 [ 104.764711][ T6987] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 104.784789][ T6987] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 104.794302][ T6987] loop7: unable to read partition table [ 104.816486][ T6987] loop_reread_partitions: partition scan of loop7 (R%0T$7)]W?18;9C?-z׌ 97d) failed (rc=-5)