last executing test programs: 50.643117925s ago: executing program 3 (id=839): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f3, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000040)={'ip_vti0\x00', 0x0, 0x0, 0x700, 0x4000000, 0x0, {{0x5, 0x4, 0x0, 0x16, 0x14, 0xfffd, 0x0, 0x1, 0x4, 0x0, @loopback, @rand_addr=0x64010100}}}}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000200)={[{@resuid}, {@init_itable}, {@stripe}, {@stripe={'stripe', 0x3d, 0x200}}]}, 0x3, 0x453, &(0x7f0000001f80)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_LEN={0x8}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0) 50.557708655s ago: executing program 3 (id=842): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x2000480, &(0x7f0000000100), 0x5, 0x757, &(0x7f0000000f80)="$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") r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000440)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000002380)="$eJzs3M1rHOcZAPBnRquVbKtduZRS91KVUmwoXUsuMrUp1C4uvfRQaK8Fq/LKCK0/kFRcyTqskn8gX+dALoEkJiGH+OxLQnLNJbGvCTkETFCsBEJIFGY/pI2lleR4V6PIvx+8mvedd7TP8+ywO/PC7gbwxBrJ/qQRxyLiYhJRau5PI6JY7w1G1BrHra4sTX65sjSZxNravz5LIomIBytLk63HSprbI83BYES8/9ckfvb05rhzC4szE9VqZbY5Pjl/5frJuYXFP0xfmbhcuVy5Onb6T+Onxk+PnhnvWq1ffXTu9he/+fsnta9f/ebW58+/nMS5GGrOtdfRLSMxsv6ctCtExES3g+Wkr1lPe51JYYd/SnucFAAAHaVt93C/iFL0xcbNWyne/iDX5AAAAICuWOuLWAMAAAAOuMT6HwAAAA641ucAHqwsTbZavp9I2Fv3z0fEcKP+1WZrzBSiVt8ORn9EHH6QRPvXWpPGvz22kYj4+N6ZN7IWPfoe8nZqyxHxy63Of1Kvf7j+Le7N9acRMdqF+CMPjX9M9Z/rQvy86wfgyXTnfONCtvn6l67f/8QW17/CFteuHyLv61/r/m910/3fRv19He7//rnLGDdfefFGp7ms/j/f/tvrrZbFz7aPVdQjuL8c8avCVvUn6/UnHeq/uMsYpW9vVDrN5V3/2ksRx2Pr+luS7X+f6OTUdLUy2vi7ZYzl98Zf6xQ/7/qz83+4Q/2t33/qdP6v7zLGfy5ceHPTznsb3e3rTz8tJv+u94rNPf+fmJ+fHYsoJv/YvP/U9rm0jmk9Rlb/id9u//rfqv7sPaHWfB6ytcByc5uNn3oo5l9u3XyrUz6t9V+e5/9Sh/PfXv+7hc3n/5ldxvjdO8+d6DTXvv7NWha/tRYGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJY0IoYiScvr/TQtlyOORMTP43BavTY3//upa/+7eimbixiO/nRquloZjYhSY5xk47F6f2N86qHxHyPiaES8UDpUH5cnr1Uv5V08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA645ExFAkaTki0ohYLaVpuZx3VgAAAEDXDeedAAAAANBz1v8AAABw8Fn/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0GNHf33nbhIRtbOH6i1TbM7155oZ0Gtp3gkAuenLOwEgN4W8EwBy84hrfLcLcAAlO8wPdpwZ6HouAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOxfx4/duZtERO3soXrLFJtz/blmBvRa2tZPcswD2Ht9200W9i4PYO95icOTyxof2GntP7hxTO37MwM9ywkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/Weo3pK0HBHF5r5yOeInETEc/cnUdLUyGhE/jYgPS/0D2Xgs55wBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADovrmFxZmJarUym3XSaHbW9/Sg09eM3MMQvekkjbxr+yWfg90ZeHanY/4bjxmiGPui0n3ayfNdCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAvMwtLM5MVKuV2bm8MwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADyNrewODNRrVZme9jJu0YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPLzXQAAAP//jAsGRw==") r2 = gettid() r3 = gettid() kcmp(r2, r3, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x2) pwritev2(r4, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a) fallocate(r5, 0x8, 0x0, 0x8000) syz_io_uring_complete(0x0) 50.455741246s ago: executing program 3 (id=846): r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x2041, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x28, &(0x7f0000000c40)=ANY=[@ANYBLOB="18110000", @ANYRES32, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="00000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff8500000006000000b7080000000000007b8af8ff00000000b7080000080000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000085000000ae000000"], &(0x7f0000000380)='GPL\x00', 0x9, 0x1000, &(0x7f0000000f80)=""/4096, 0x41000, 0x71, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000004c0)={0x8, 0x2}, 0x8, 0x10, &(0x7f00000006c0)={0x4, 0x0, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000840)=[r2, r2, 0xffffffffffffffff, r2, r1, 0xffffffffffffffff], &(0x7f0000000880)=[{0x0, 0x4, 0x1, 0x7}], 0x10, 0x7ac, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00'}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000006}, 0x5524, 0x5dd8, 0x3, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x12) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000240)=0xfffffc04, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000180)=@IORING_OP_MKDIRAT={0x25, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x84, 0x0, 0x1}) io_uring_enter(r5, 0x8ba, 0x696d, 0x20, 0x0, 0x0) io_uring_enter(r5, 0x47f6, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000000)={0x2, 0x1002}, 0x4) close_range(r8, r9, 0x0) gettid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000000900)=@mangle={'mangle\x00', 0x44, 0x6, 0x510, 0x3a8, 0x210, 0x210, 0x0, 0x138, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570) 50.067355039s ago: executing program 3 (id=855): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x10, 0x3, 0x9) r0 = socket(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000280)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002f00)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f00000000c0)=@generic={0x1, 0xfffffffffffffff7, 0x4}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) getpid() syz_emit_ethernet(0x52, &(0x7f0000000980)=ANY=[], 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) 50.048959379s ago: executing program 32 (id=855): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x10, 0x3, 0x9) r0 = socket(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000280)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002f00)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f00000000c0)=@generic={0x1, 0xfffffffffffffff7, 0x4}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) getpid() syz_emit_ethernet(0x52, &(0x7f0000000980)=ANY=[], 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) 1.501204609s ago: executing program 1 (id=1820): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000040000000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000f9ffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1, 0x0, 0x2}, 0x18) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) 1.487751489s ago: executing program 1 (id=1821): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x50a, &(0x7f0000000200)="$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") r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x8000000, 0x0, 0x0) 1.36665664s ago: executing program 1 (id=1822): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r4, 0x0, 0xfffffffffffffffe}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r3}, &(0x7f0000000000), &(0x7f0000000040)='%-5lx \x00'}, 0x20) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000000906050000000000000000000100000509000200200252d8000000000300000000000000080009cf4000000001140008801000bd0000001100aaaaaaaaaaaa0000"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000240)={0x0, 0xffac, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000080)=0x40005, 0x4) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40200, 0x0) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000240)={'veth0_to_batadv\x00', 0x400}) r7 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x4, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x13}, 0x400, 0x100, 0x6, 0x4, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000001001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="f2fdaf344fd8926e1bc8cb8268788d63f8f29f8a41734400970755ad7aed0af8b5ef7871ce862525f9b5ca30bba67c09eef4a9c55d10d79d6c03486e9561de2f624e8aea7ba345632d536c4b3a832f26dea414c01955812540e2c9af0831b8205a65cccdb799eee2b955b7224e774651503317653e04ed033685e4cadf53e95229d1c096aa5f6b279f15a3af0b6cd3e215ff5f4d3e641c073c73d1574ee4f2b6a39934f112314da79eea6e5c8bff7329bf4b3ab4f5dbb573f1befdf4af6f01f7c69d03a01c25cc3ff49ac46b3ac913b681f93e79100e21799b809c854e4d817f88c8d1f7525fbf50489e3fb847d6b292cb68f9e9ab47b71cf98d35ff8bf5b6377a27fef8d3815b25ad33c67588edb98261aec773b1b6fc458d37f17f9afd749f289819f6ea194d19029a7acb764e66b817472ec76b0c3c8af8c9c4dde2a85e3f86914315fed2aa65f73d6b1f76da614823b264bc81f8aaedee7b4c98d592af39fd1c3bd87c52cd9a78741a533e851bbc1e1af77db5869fe74076f784d020cb6159d41f7c78b445fc6d5d7f1a794fd2fc024e5f04002491805a43d2d50418f00ea177cf5d7fb7ff8483b900c7b51791bc5a924bf4d6fa744d4cd00e10d6607c81b23575db33e6c8ca78af3f2cf410fd044dcd819af8932ed3a5bcb902923898fa25bdc255a29f8e70c25df4c2e0ad6713fb7fea14406d4bd3cf069bf6c0833b4a29f8b7403b3fdb4414f7716e22fa418eb18fe9c83f38177fda23546105f6ba3cf60e4712d04cc8deefa09eb081b6a5774689f950bdb94b1df40f0cfee3fb5c83a674a10e2ba0e313043615c63c74446a97f89e47b8cb85623357fd58bf897c5345d3e6b3951467c5b5bafeb51162f6a72c9da67d4cc05265a1cd219540497dd1ac978cc603daab999d0ba6b22a4c29b95603997c8d4f52b2ffb5cb147c577f344a8d39dba74688bfd3c78e0d58343fcfb2b638e8b201dc3f674d6908f86d38eb21265f038dc4dc2ea303f25c881db1cdb4c99ab3e020eaff4f5d7a1f80de6326d50d632cf964bbcde8486cc56e661badf9850a00b9bea7cbe494b543a7d3630bac3071fd458d15eabd3e6326f533adfb9563acad1cf1b2cd0312eb20de23f1072bb43005ed0b780b199f8e8e2a18ad3b3635885821f1c6635e8c26ecfe03352e4018814caf7c0993bb33c753d5958e27eca05e4c55e2bcdda03a35a1bcf2acbe9296f071c813f03395facd8646790bdd020d46976a915af4fca73998b386011f3f459490969ad955ff1b9997e3a7029518db5ef8d24065a36262e8895a888cb04b9918974f37b54af06bd4c6efdda0a2e6af49bbd45233763a205f639f086d3cebee8fb43b7f9b55b381a0a88e142a560519a415892dac1da49a87c37d537f0aa1d4461268261c575ccf77f46e52da6575351264508be41511bb1d70dd5f74bd25c9e28ab8b8432b85e45b6a5a388fbd9df82448f8badb61bacb4f398672b45f300a3fe093e4bb2b7c423ee031dc273ed5ad4f29981bde1ec8d3a121c7c313d2f8f88a2af8af6288c1534f0699651631ae2a2cc1b9fb4fd999572a88d710dfb71fa4e19a8b3027d1d411a9579bfd815e4e7b5f30aae092cb57ea5bd27c00b602ec4a2017e4326f49959a57bb4f58fd48a83896514ae1b7cd650b1a7c933f2ba90abae98a98b6536ada782825fe9ef324a8e9e1d063d599e9a2edc394506c31e676cd62dfcf3b17e93038d570c695af9ad9926cdc758de53d22d416e1f10ce5d7ee92dfa7f034c649284a4db210a60dd50d3a51d362bbd81c0d28e4f34bed8725f3ae11b9aad84ab8dda0c876a51c2e27735db1948c95f7aa79eeed54d89224b0e4fdfbb10cd5e87f65ac28d85638406929cbbe1f007ee30b88f762bfbe9403fd4c38d9498d54e9c76734981087e3700c5803f943e8a07b461d7796f6dafd70c2611f28724fcee50d18fc7d20bb840b741bcc51fd8b3efd2ae4c032887a8c05ac127e804c3b22ecab6ae67886eb293bec3774a34108ab95cdd5bb8755bf84873d60298446cd537473012d5eef122266184969073e6c5493f3a50f19e518aa5d85ba995aaae454092fe36f730a0d5b4933f3bd64cc71292f13906ad188f6c7b4efdf6d2302764ee3e459bc6cfa89f3a1fdb34d8ab2e855d829ab11d4a73b9c56586f26d2a10b1805c887e1efd3d1ec906dd43d69e50bde4f85d83c04687f135919160212ec1428eaab2c1a967b6803e929c9881284deb8f28d1aed6fa52cd642e13e6fde26461dd540daffebd01199fa78335e9d2ad4726afa8285a5766ffca095d53a8eb1fc2bcc002b78e2f02f69bb0ebb8567202c2b2fa0d96736049370e33c7f5bade5e247697a6d22a16364a2cada5a62a719681940b47f0c073f49fefc33e5c19e9bf16b34572125c221bbd5b635688dea3e411c2c0ecb2cb53500f1da86bd2a03936f942668054e66b4e29908ab0119c9048a761f60193f42f00ac35d367d14d449ffe172c4aee82620e1f4105c2775be6de42e1c49f07338ff3ab59cacb89cd722693bbfb2a1d436d2462ec0ff4250f63577a402a8b64b753f3f02d2073a361c382023c77fbdaeadcafe2ead32ab82de877afa650d8043fb87884edad7bca93002b9a5021bd8679f7f4c39ab501c904340e11e3ae269bff337be98beed26441848031f2a479a4bfc4b939d2313f387cf1a46f4d645ee18cdba83531a9f0bb63774f515aa954c013f8d3cd3da0d073e7bae64c652f272cfe260f767a0161333ab356d52e0a8e9171c8f22ba0b5437de05863c6db151ceb71b9c1e2c98175590ff390c272a440b494c71ba0c66f5530f288fd16dbf0a2837d7e140e8461b29816604277722894691c62d1a45b095aa2155ddf495af4880363ee5a469317185acbc8bc059a21e764e634a21a1cde615bfdb4477fd2f64c2bbb94e7ca3b47a989dfada8980d4e5182955839b8936c5c49f038d62503758ea8e37a492b21d8da0cf8555d65edebfc9ec3e857b294c8d25465c185792cfad2cac0fdb1ca3921a76ef324e59e7e7c1c45993c4234f06932b902a242652a402849eb47b5eecb73a160574e442319f025f859436bd6c7de4271d3a152de7a2c582bca76c637fb4187ce565c1cb3a062df25ea0f4f9f2dfd475b05d7fa7d74d632d8f8e8b8bc350e18fc59001b2086dddc9b0a74b06da3a539dbcb02c643cc703ac414ddfe19e48e65101f40ad63be82d2dca9a3b840bc3a07dd19bcf1e682ca1964dd1102c1679955648bc474828ecd06d4257f9bb5b9e99fe70eafea8ed686d4a2b84633cfb288b1119524bd89d6534b3286f9ce7854fb59462a28551a9e0ee255a1a5f46f9c0b4d998e9026fd515e64010af1998a20f45025e3c6a84f2a7ce3302ec783b18d6042afc68c55317447181627e550adca2d56b6d25a9f35b8f9d0d3a98d3c7f55641c947c94b47eed162b03168b2a90c1e63bcf58ceedea83e1f465b0d1c8498443a8e5720f3bb2f027a2d213cf3a50ed0d1a9bf2647e0061c70ede5965f8db8e006188df8609fd21fe7ae29da2128afd743685fdfd6f5884d5cf5976b2a9f20794609d430a6420fd11405ecce8ab2bcab4f24ccaf58d1292d5afd0f2a92a32422d6d328060921fe1016b9b2ddf4ca376bb1735ccff9b4f979bb8789de76265372f32afda9f725d33273b6969c3e6fa2f17b9a39a824b898a78e6b8a0ab0842da07837fa66cafc73332680eb8834a5f78e6ad52f75dd971e1e951c7ff55482c91395f2bfeafdc326111d1d964c0d1909ffebc30640dfc3837b072c3ab1fbf8be573a726648af2ac741a8c762bd345dfdbb1be1cdd52b9b7f46bbf1e8d5fb65c799be32424a634dbd67070c84e08846d0266980ea7078868adc2f273cfd5896382947c0db0e802ec7c7e1c980aab9ae934b0b9743b11eb343d4a38663a4390de0e9ed49dd432208958bade28acd29971d05a06344ea5e8de4d553d1ac58310a67d42834898e7a92d75620b99d03238583f9978731a8aee06e613ea5473d68b71b18fa76035d820222d6436b2fd5e45061a610b0da290e34edd6dfb404757eddb789427d8f447e60a1c5d45806c68ebc48cd1e4ad2ca85322915c97451fbb44b1e8ce4b39177be0684ee8bd87479b0af20631105ddbd93ea2b945b49a2f98909419410051651197d28b72f2f9cd798814774eb9d15eb99580bb56602e1c2042d1db195b3cad04400b16587cca0016d9d750c9c1d6eaccf55f48b9a09f8fc1ba11cd55066e9b0c38fcbfb5e92a6910735390d94b4e68501dbbe65d51b625371af05d51552608ef90d85a585d4ef154e462c43a6e3d6cb21ca46b5d208efa652c1dc5793f88438a58d905f02750ea0fe40da387ee75bd06e81af4843054ffd90dc658912247f92478000561067806866188e5e815956da530a4f7eccdbd7597505c9a7b0e4e1816b1e0502dbcb838f283a8806ad0f2ce815a88efbc3e4839969b3de1ea14751dbeb83433fce7b5146c6ebb6cfff40828b2cb77f3f7615b6ea9f0422148d0fafd5e2661d9f4af2e6e0682bfabd2e4aad3b0ab124b723ba394c5cc622c0ace603dfe80d8b3135528a1667fbbb8786c529a767631e478107c2f48337b10aff5b086b70f56712a83156061624a0089957a6c973470bd2279943a28ac58c7480fbfd95afc91d662c37d996b06f6b20b6e2288c2a795441976daaea7a16dfeb75e92d3919de314ec156e978ec23e846d87d68fcbe3069c0873e726637366922f959f6dbff35489111c4b009ab2427702055d69e468b55a3dd730cba7646027ca75e9d78e2e896fc6056a900f1930a6a0bf4cf3f0e50f359d38824b5998f0fb03b379da77aedffaeb561e7a71eedac76a5d3efffbc5ae581e415b8bafde104b146039e048d4e8ec3aaa5eb9b3a01ab32c46838be09d03dfc534f6865be1fb43d3abd8f2c9bab77f8102a80c809a494400b7eb08811112255a6874e3e618687a03a183ce7adeb52aa1ff68073a3a39bc210dc189b569b8ac25c4b2adf0f58b9b00dafa9c0469cfe3a01c370db23d23a771195e696edba7e84690efaddc3ce2001d380b26d8cdbdedc0d376e1888ef237c08e495fc8f0e6acc57ba53041909f838adc22e2c8b892cc8522dd07a9c7044fed6dfdff7b7be9a1ead731722b8b0f93cc381e3d0abcb31da78cd895b00a38aa95f7e2abf43299d680550fdfbc2ceeb9e638f2d75cc9fb0f6cfe12922f574c88e9896080b282a3543b4045e78838476be9a25663780bcb1f6e9657e1fd38c40860b9cdef10fddcd5b9e82ff60a104a85b17a5e9a4dd0ed219c8d7de90a04626624c66a5a4d429a73adc93c4ea7be7c336875c5a9c0c5450f1d0f8cd152a185687e1bda3689f2d2ac8c0d6e01f77c6b728d2c0b1fb02733ad4b5432c930b0916e7fbbbeab3716b5322f43b10cca24593e65e1574cfa479ecb4d6f32462d87e55a7c6fd271ad0ab2360e3cf2cf14f39fa22d8115005f2f62113fdaec06929b9119190538ca273965b546195cf5b3f28e4c4f9d3758fc0d425c7568609c89124d0af1feb0d0d49000cc84822b70471e08eff928db7439e74775fbeeec8e91eaa15c31ccc8beba636603735424860595f96c2e88e71084171bc4707640d099caaf4971371c3acc2d5608f6af61ff565d508e8e4a915c1daa5da2eb24782f0f3ac6eb350e6e4f8f5d068a6a2ec8c7720b0f7629ae90e2092d4d75c9bc43ae2d7275e690a775c17f7f1d6350789b3cbf62fca9c8a7fc231b72ef0d56dab721a2022f87c910a7fbacb406f8e241da8eab3c04750a4", @ANYRES16=r7], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1d, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000f1ff000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x51, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='io_uring_complete\x00', r10, 0x0, 0xfffffffffffffffd}, 0x18) r11 = socket$key(0xf, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, 0x0) sendmsg$key(r11, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="020300000f0000000000000000000000010018000000000005000600000000000a00000000000000fc0200000700000000000000000000000000000000000000020001000000000000000280ff00000005000500000000000a"], 0x78}, 0x1, 0x7}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='mm_page_free\x00', r12, 0x0, 0xfffffffffffffffe}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) 1.31207399s ago: executing program 1 (id=1824): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000040)={0xa, 0x12, 0x11, 0xf, 0x3, 0xc, 0x6, 0x14b}) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000020017e9c0000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="1b0000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910200000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00"/11], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYRESHEX=r3], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setxattr$security_ima(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000180), 0x0, 0x0, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_int(r6, 0x0, 0x33, &(0x7f0000000300)=0x80000005, 0x4) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_int(r7, 0x0, 0x33, &(0x7f0000000300)=0x80000005, 0x4) sendto$inet6(r7, &(0x7f00000002c0)="9e", 0x1a000, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r6, 0x1) r8 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x13) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffff8, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, {}, {0x0, 0x0, 0x0, 0x8000000}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {}, {0xffffffff}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff}, {}, {}, {}, {}, {}, {}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x3}, {0x80}, {}, {0x0, 0x0, 0x4}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {0x0, 0x3, 0x200}, {}, {}, {0x5}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x8}, {}, {0x0, 0xfffffffd}, {}, {0x7f, 0x0, 0x0, 0x0, 0x0, 0x10000}, {0x0, 0x1}, {}, {0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5}, {}, {}, {0x10000000}, {}, {}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0xfffffffd, 0x9}, {}, {}, {0x0, 0x0, 0x10000}, {}, {0x0, 0xffffffff}, {0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}], [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$tipc(r9, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a", 0xb5}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0xe00}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0x17}], 0x4, 0x0, 0x0, 0x8010}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) 1.27974866s ago: executing program 2 (id=1825): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r0], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) connect$netlink(r2, &(0x7f0000000280)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000002f00)=@newtaction={0x18, 0x32, 0x829, 0x70bd2b, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8800}, 0x4000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000fb"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000004c0)=ANY=[@ANYRESOCT=r0, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = syz_io_uring_setup(0x1725, &(0x7f0000000100)={0x0, 0x1455, 0x800, 0x80400002, 0x2d4}, &(0x7f0000000300)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000240)=0xfffffc04, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000180)=@IORING_OP_MKDIRAT={0x25, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x84, 0x0, 0x1}) io_uring_enter(r5, 0x8ba, 0x696d, 0x20, 0x0, 0x0) io_uring_enter(r5, 0x47f6, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000000)={0x2, 0x1002}, 0x4) close_range(r8, r9, 0x0) gettid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000000900)=@mangle={'mangle\x00', 0x44, 0x6, 0x510, 0x3a8, 0x210, 0x210, 0x0, 0x138, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570) 1.191042441s ago: executing program 2 (id=1826): shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0xb, 0x0, &(0x7f0000000380)=ANY=[@ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000000c0)='ext4_sync_file_enter\x00', r0, 0x0, 0x1}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYBLOB="0400000000000000000000000000620b49fcb4c77ef38ac181c669ef27dd39925e4acf056e325333a618f549f1ad9b39750d45e723f008e68626e49a2acaa771a92d9e51a934f891060371ea6057cd9f295dde05546755364d8e7a0d8cbdf1e5c3b167d9fa001a19dece59c1fd11799bc42c3a50c7ef7c8445e2a8304231d724d142317381c5bbcc6a008a0ae1914b36c5dd87f891684c151c851edb627a", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000200), &(0x7f0000000280)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000380)='kfree\x00', r2}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r3, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) r4 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r4, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=[@mask_fadd={0x58, 0x114, 0x8, {{0xa, 0xfff}, 0x0, 0x0, 0x0, 0x8, 0x1, 0x2, 0xb, 0x9}}, @rdma_args={0x48, 0x114, 0x1, {{0x0, 0x51cd}, {0x0}, &(0x7f0000000100)}}], 0xa0}, 0x0) pipe2$9p(&(0x7f0000000000), 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_io_uring_setup(0x1c1e, &(0x7f0000000600)={0x0, 0x0, 0x1000, 0x1}, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$pptp(0x18, 0x1, 0x2) kexec_load(0x0, 0x2, &(0x7f0000000900)=[{0x0, 0x0, 0x200000000}, {0x0, 0x0, 0x3e0000000000, 0x8000}], 0x0) 1.098974382s ago: executing program 2 (id=1829): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = socket$xdp(0x2c, 0x3, 0x0) flistxattr(r0, &(0x7f0000000540)=""/62, 0x3e) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000300)='btrfs_qgroup_account_extent\x00', r1, 0x0, 0x100000000}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002540)=@newtaction={0x15c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x148, 0x1, [@m_connmark={0x144, 0x5, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xc, 0x274a2a5486eb4a3b, 0x0, 0x10000}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x2, 0x10000000, 0x6deffc9f, 0x7}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xa, 0x1, 0x6, 0xe, 0xd}, 0x8000}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x0, 0x0, 0x1ff, 0x6}, 0x6}}]}, {0xa4, 0x6, "b2b2a6d219d5c3b5d7eb061b8d860a8d99e68c94ba455b7bcb9f237a4979f3333946b3978c1c0a3b34bb8c4dde31f906d94881f4cd37a8b047f988877daa3d6fb793cc6a46103d1d54c8ec9593149858dd38e4987caa55af4ed0cf62b0c06a3f419ee918a84ad35f54a46fa72b41ef051a71b1a1615d07f51da706637b88ed813342d30a334d1cc8412845acb1220256476b8671f2164e3ad889a4e314907dba"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x15c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x14}], 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x9381, 0x80, 0x7ffff, 0x2000088}, &(0x7f00000004c0)=0x0, &(0x7f0000000200)=0x0) geteuid() r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)='./file0/../file0\x00', 0xffffffffffffffff, 0x1000, 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000d00)='kfree\x00', r9}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$eJzs289vFFUcAPDvzLZFKNiK+IOCWkVj44+WFlQOXjSaeNDERA94rG0hlYUaWhMhjVZj8GhIvBuPJv4FnvRi1JOJV70bEmJ6AT2tmd2ZdrvdLW3ZdtH9fJKB92be5n2/O/N238zrBtC1hrN/koj9EfF7RAzUqmsbDNf+u7m8OPX38uJUEpXKW38l1XY3lheniqbF6/rzykgakX6WxJEm/c5funxuslyeuZjXxxbOvz82f+nys7PnJ8/OnJ25MHHq1MkT4y88P/FcW/LMYrox9NHc0cOvvXP1janTV9/9+dukyL8hjzYZ3ujgE5VKm7vrrAN15aSng4GwJaWIyE5Xb3X8D0QpVk/eQLz6aUeDA3ZUpVKp9Lc+vFQB/seS6HQEQGcUX/TZ/W+x7dLU445w/aXaDVCW9818qx3piTRv09twf9tOwxFxeumfr7ItduY5BADAGt9n859nms3/0ri/rt3d+drQYETcExEHI+LeiDgUEfdFVNs+EBEPbrH/xkWS9fOf9Nq2EtukbP73Yr62tXb+V8z+YrCU1w5U8+9NzsyWZ47n78lI9O7J6uMb9PHDK7990epY/fwv27L+i7lgHse1nj1rXzM9uTB5OznXu/5JxFBPs/yTlZWAJCIOR8TQNvuYfeqbo62O3Tr/DbRhnanydcSTtfO/FA35F5KN1yfH7oryzPGx4qpY75dfr7zZqv/byr8NsvO/r+n1v5L/YFK/Xju/9T6u/PF5y3ua7V7/fcnb1XJfvu/DyYWFi+MRfcnrtaDr90+svraoF+2z/EeONR//B2P1nTgSEdlF/FBEPBwRj+SxPxoRj0XEsQ3y/+nlx9/bfv47K8t/ekvnf7XQF417mhdK5378bk2ng1vJPzv/J6ulkXzPZj7/NhPX9q5mAAAA+O9JI2J/JOnoSjlNR0drfy9/KPal5bn5hafPzH1wYbr2G4HB6E2LJ10Ddc9Dx/Pb+qI+0VA/kT83/rK0t1ofnZorT3c6eehy/S3Gf+bPUqejA3ac32tB9zL+oXsZ/9C9jH/oXk3G/95OxAHsvmbf/x93IA5g9zWMf8t+0EXc/0P3Mv6hexn/0JXm98atfySvoLCuEOkdEYbCDhU6/ckEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQHv8GAAD//5LX5s8=") creat(&(0x7f0000000340)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r10 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x42) ioctl$LOOP_SET_STATUS64(r10, 0x4c04, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x13, 0x0, "ef359f41a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4eb4b78c66ee677df701905b9aafab4ffffffff00ff0100", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000", [0x0, 0xc]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) io_uring_enter(r4, 0x22e0, 0xaddf, 0x2, 0x0, 0x0) syz_clone3(&(0x7f00000004c0)={0xe12d480, &(0x7f0000000480), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1.032403373s ago: executing program 4 (id=1831): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000040000000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000f9ffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1, 0x0, 0x2}, 0x18) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) 1.020324393s ago: executing program 4 (id=1832): bpf$PROG_LOAD(0x5, &(0x7f0000005980)={0xa, 0x10, &(0x7f00000003c0)=ANY=[@ANYRES32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x10, 0x3, 0x9) r0 = socket(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000280)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000002f00)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f00000000c0)=@generic={0x1, 0xfffffffffffffff7, 0x4}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) getpid() syz_emit_ethernet(0x52, &(0x7f0000000980)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604dd308001c0600fe8000000000000000000000000000aafe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="7002ffb72add3ce600000000000000"], 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001c80)=ANY=[@ANYBLOB="0b000100050000000900000004e0b90005010000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES8=r2, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="000000000000008af8ff00000000bfa200000000000207020000f8ffffff000008000000b704000000000000850000000300000095000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) recvmmsg(r5, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)=""/2, 0x2}, {&(0x7f0000000ac0)=""/4096, 0x1000}], 0x2, &(0x7f00000002c0)=""/138, 0xff9f}, 0x3}, {{&(0x7f00000004c0)=@nfc, 0x80, &(0x7f0000000400)=[{&(0x7f0000001ac0)=""/147, 0x93}], 0x1, &(0x7f0000001b80)=""/221, 0xdd}, 0x6}, {{&(0x7f0000005880)=@l2tp={0x2, 0x0, @dev}, 0x80, &(0x7f0000001d80)=[{&(0x7f0000005900)=""/125, 0x7d}, {&(0x7f0000000580)=""/1, 0x1}], 0x2}, 0x9}, {{&(0x7f0000001dc0)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000002100)=[{&(0x7f0000001e40)=""/137, 0x89}, {&(0x7f0000001f00)=""/218, 0xda}, {&(0x7f0000002000)=""/250, 0xfa}], 0x3, &(0x7f0000002140)=""/103, 0x67}, 0x7fff}, {{&(0x7f00000021c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0xfffffffffffffe87, &(0x7f00000022c0)=[{&(0x7f0000002240)=""/118, 0x76}], 0x1}, 0x4}, {{&(0x7f0000002300)=@phonet, 0x80, &(0x7f0000001d00)=[{&(0x7f0000002380)=""/233, 0xe9}, {&(0x7f0000002480)=""/8, 0x8}, {&(0x7f0000005a40)=""/4101, 0x1000}, {&(0x7f00000034c0)=""/226, 0xe2}, {&(0x7f00000035c0)=""/4096, 0x1000}, {&(0x7f00000045c0)=""/182, 0xb6}], 0x6, &(0x7f0000004700)=""/4096, 0x1000}, 0x7}], 0x6, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r6, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e03090080ee71"], 0xee8a) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") mkdirat(0xffffffffffffffff, 0x0, 0x40) 987.595573ms ago: executing program 4 (id=1833): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x120b, &(0x7f0000002300)="$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") rename(&(0x7f0000000400)='./file0\x00', &(0x7f0000000c80)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0xfffffffd, 0x1ae}, &(0x7f0000000140), &(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f0000000500)='task\x00') bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_io_uring_setup(0x29e0, &(0x7f0000000340)={0x0, 0x30b0, 0x2000, 0x6, 0x25b}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mkdir(&(0x7f0000000140)='./control\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2c00) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) 939.812273ms ago: executing program 0 (id=1834): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x18) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x1218, &(0x7f0000003540)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x802c550a, &(0x7f0000000000)=ANY=[]) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) mlock2(&(0x7f0000338000/0x3000)=nil, 0x3000, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r0}, &(0x7f0000000200), &(0x7f0000000180)='%pB \x00'}, 0x20) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYRESHEX=r3], 0x4c}}, 0x0) request_key(&(0x7f0000000240)='id_legacy\x00', &(0x7f0000000280)={'syz', 0x2}, &(0x7f0000000340)='vfat\x00', 0x0) fsetxattr(r3, &(0x7f0000000080)=@known='security.apparmor\x00', &(0x7f0000000100)='}.^{(+!\x00', 0x8, 0x2) r4 = socket(0x2, 0x80805, 0x0) socket(0x2, 0x80805, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d0800fe007c05e8fe55a1150010000200142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000300)={0x0, 0x952f, 0x0, 0xb3}, 0x10) rename(&(0x7f0000000400)='./file0\x00', &(0x7f0000000c80)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_open_procfs(0x0, 0x0) 884.475284ms ago: executing program 0 (id=1835): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r4, 0x0, 0xfffffffffffffffe}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r3}, &(0x7f0000000000), &(0x7f0000000040)='%-5lx \x00'}, 0x20) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000000906050000000000000000000100000509000200200252d8000000000300000000000000080009cf4000000001140008801000bd0000001100aaaaaaaaaaaa0000"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000240)={0x0, 0xffac, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000080)=0x40005, 0x4) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40200, 0x0) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000240)={'veth0_to_batadv\x00', 0x400}) r7 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x4, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x13}, 0x400, 0x100, 0x6, 0x4, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000001001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="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", @ANYRES16=r7], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1d, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000f1ff000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x51, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='io_uring_complete\x00', r10, 0x0, 0xfffffffffffffffd}, 0x18) r11 = socket$key(0xf, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, 0x0) sendmsg$key(r11, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="020300000f0000000000000000000000010018000000000005000600000000000a00000000000000fc0200000700000000000000000000000000000000000000020001000000000000000280ff00000005000500000000000a"], 0x78}, 0x1, 0x7}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='mm_page_free\x00', r12, 0x0, 0xfffffffffffffffe}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) 760.058714ms ago: executing program 0 (id=1836): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r0], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) connect$netlink(r2, &(0x7f0000000280)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000002f00)=@newtaction={0x18, 0x32, 0x829, 0x70bd2b, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8800}, 0x4000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000fb"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000004c0)=ANY=[@ANYRESOCT=r0, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = syz_io_uring_setup(0x1725, &(0x7f0000000100)={0x0, 0x1455, 0x800, 0x80400002, 0x2d4}, &(0x7f0000000300)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000240)=0xfffffc04, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000180)=@IORING_OP_MKDIRAT={0x25, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x84, 0x0, 0x1}) io_uring_enter(r5, 0x8ba, 0x696d, 0x20, 0x0, 0x0) io_uring_enter(r5, 0x47f6, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000000)={0x2, 0x1002}, 0x4) close_range(r8, r9, 0x0) gettid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000000900)=@mangle={'mangle\x00', 0x44, 0x6, 0x510, 0x3a8, 0x210, 0x210, 0x0, 0x138, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570) 759.428294ms ago: executing program 2 (id=1837): perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4003, 0x20800, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x100000044, 0x100}, 0x0, 0xfffffffffffffffd, 0x80000001, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x3, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a000000800000000642"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) 363.814808ms ago: executing program 5 (id=1839): ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x404000, 0x0) r1 = dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000000)='\x00', 0x0, 0xffffffffffffffff) r2 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r3) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r5) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {r5, r3}}, './file0/file0\x00'}) ioprio_set$uid(0x0, r6, 0x4004) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x0, 0x0) preadv2(r7, &(0x7f0000000200)=[{&(0x7f0000000380)=""/163, 0xa3}], 0x1, 0x9fffd, 0x3, 0x12) 325.133728ms ago: executing program 1 (id=1840): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000040000000000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_rr_get_interval(0x0, 0x0) 324.218148ms ago: executing program 0 (id=1841): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00', 0x0}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, 0x0, @perf_bp={0x0}, 0x1016c7, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000014c0)=ANY=[@ANYBLOB="a0010000100001000000000000000000fe8000000000000000000000000000bbff01000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000320000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000af0000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000170000000000000000000000000000000000000000000000001c0017"], 0x1a0}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000008c0)=@newqdisc={0x150, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_MAX_P={0x8, 0x3, 0x8}, @TCA_RED_PARMS={0x14, 0x1, {0xffffffff, 0x8, 0x0, 0xa, 0x0, 0x1a, 0x5}}, @TCA_RED_STAB={0x104, 0x2, "cb030890171319da1db2ec01d014fa61d80db9d1aae91311c2fa1fbaa1b121dbc9bcb117c6d06e02899d62bff57c457012e3ede4edd01614d35a2b4811b96355622adb97b2b5d959ad0701bd80bab191266fa9b9c7ca9fa090d8fa9aa9b6d66e507bf362e54e58a05278c77be644c2166e269cfaea59f28d065bd081bae33b1b5bf1275793ff29544807b351a156f03e898356449c8092189344a74131978e3799ac2c19339b501d38fcbc8d970ecd330863d4a6f56f2c0bf2e469dfc9c17d200edc77b7f3318b487c855b4ef49c0dd30fdaea6ac1f97860e2bedd01502759b7df9bf98fd36cd8be5045fc3c5a0aea1c48f7858aaee1d51d4137da7af9c7c689"}]}}]}, 0x150}, 0x1, 0x0, 0x0, 0x4048801}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wg2\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=@delneigh={0x88, 0x1d, 0x4, 0x70bd2c, 0x25dfdbfc, {0x7, 0x0, 0x0, r3, 0x1, 0xd1, 0x3}, [@NDA_PORT={0x6, 0x6, 0x4e33}, @NDA_DST_IPV4={0x8, 0x1, @initdev={0xac, 0x1e, 0x2, 0x0}}, @NDA_MASTER={0x8, 0x9, 0x9}, @NDA_CACHEINFO={0x14, 0x3, {0xffffffe6, 0x7fff, 0x1, 0x800}}, @NDA_VLAN={0x6, 0x5, 0x3}, @NDA_PROTOCOL={0x5, 0xc, 0xa}, @NDA_MASTER={0x8, 0x9, 0xfffffffd}, @NDA_VLAN={0x6, 0x5, 0x4}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}, @NDA_DST_IPV4={0x8, 0x1, @loopback}, @NDA_MASTER={0x8, 0x9, 0x8001}, @NDA_IFINDEX={0x8, 0x8, r3}]}, 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x4040) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080)={[{@errors_remount}, {@noload}, {@bh}, {@acl}, {@noblock_validity}, {@usrquota}, {@stripe={'stripe', 0x3d, 0x66}}, {@acl}, {@resgid}, {@debug}, {@acl}, {@journal_dev={'journal_dev', 0x3d, 0x3}}], [], 0x3d}, 0x1, 0x536, &(0x7f0000000740)="$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") 280.212278ms ago: executing program 5 (id=1842): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x1f44fe3d}], 0x1, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x40) fcntl$notify(r1, 0x402, 0x8000003d) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000edffffff00000000184759d0705b3d58110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c800000", @ANYRES16=r3, @ANYBLOB="01002abd7000ffdbdf2501000000100002800c00018008000100080000001800018014000200766574683100"/54], 0x3c}}, 0x240000a0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000fedbdf25080000001800028014000380100001800400030008000100050000000c00018008000100", @ANYRES32=r6], 0x38}, 0x1, 0x0, 0x0, 0x4000814}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000900)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x1, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x2, 0x0, 0x2, 0x1}}}}]}, 0x4c}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000827bd7000fedbdf2516000000180001801400020067656e657665300000000000000033cc05000400100000000500020000000000340001800800030002000000080003b1da2510816be0801a00010000000800030001000000080003000300000008000100", @ANYRES32=r9, @ANYBLOB="08000300010000000500040000000000"], 0x78}, 0x1, 0x0, 0x0, 0x20004404}, 0x8000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r10 = open(&(0x7f0000000280)='.\x00', 0x0, 0x10) fcntl$notify(r10, 0x402, 0x3) r11 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r11, 0x402, 0x8000003d) r12 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r12, 0xffffffffffffffff, 0x0) 279.788628ms ago: executing program 1 (id=1843): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x4, &(0x7f0000000280)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x303}, "a3bace1e626424b0", "2abb32854c13a5e58d1e18a47a14378b", "921f7f3e", "6b0af3fd6831a415"}, 0x28) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000240)='n', 0x1}], 0x1}, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000040)=@ccm_128={{0x303}, "157fe7b232393462", "2f6857be8952ffc4394572a3127a2e1f", "58995583", "1639377b34b3771b"}, 0x28) recvfrom$inet6(r2, &(0x7f0000000100)=""/19, 0x1ff4, 0x40, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000780)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x290, 0x0, 0x5c, 0x160, 0x118, 0x3e0, 0x1e8, 0x228, 0x25a, 0x1e8, 0x228, 0x4, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, [0xff, 0x0, 0xff000000, 0xffffff00], [0x0, 0xffffffff, 0xffffff00, 0xff], 'bond_slave_0\x00', 'veth1_to_team\x00', {}, {0xff}, 0x0, 0x3, 0x1, 0x46}, 0x5002, 0xa8, 0xf0, 0x52020000, {0x0, 0x6802000000000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@ipv6={@local, @private2={0xfc, 0x2, '\x00', 0x4}, [0x0, 0x0, 0xff], [0xffffff00, 0x0, 0xffffff00], 'veth1_to_hsr\x00', 'erspan0\x00', {}, {}, 0xb1, 0x8, 0x1}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x200}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0) r5 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000400000000000008000000180001801400020073797a5f74756e0000000000000000001c0002800400010014000380"], 0x48}, 0x1, 0x0, 0x0, 0x20004084}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r6 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0xfe, 0x0, 0x0, 0xfffffffffffffffc, 0x60020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080)}, 0x0, 0x3, 0x0, 0x0, 0x2, 0xfffffffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x100, 0x31111, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0xf16}, 0x10010, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r6) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) 249.239758ms ago: executing program 2 (id=1844): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x2, &(0x7f0000002400)=0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="5400ffff0000", 0x6, 0x0, 0x0, 0x2}]) 233.786228ms ago: executing program 5 (id=1845): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x18) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x1218, &(0x7f0000003540)="$eJzs3E9rXFUYB+A37fSPU5OJWqstSA+60c21ycKVmyApSAeUtim0gnBrbnSYyUzIHQJTxHbn1s8hLt0J4hfIxo1rwV02LrsoXuncYJuQLkbQS8LzbOZlzvkx58wMA/dy3tn78LvN/kaZbeTjODU3F62tiPQ4RYpTcTpqj+K9O7/9/tatu/durHS7qzdTur5ye+mDlNLC1Z8/+/qHt38ZX7jz48JP52J38fO9P5f/2L20e3nvr9tf9crUK9NwNE55uj8ajfP7gyKt98p+ltKngyIvi9QblsX2gfGNwWhra5Ly4fp8e2u7KMuUDyepX0zSeJTG25OUf5n3hinLsjTfDv69s7H2/eOqqiKq6kycjaqqqpeiHRfi5ZiPhejEYrwSr8ZrcTFej0vxRrwZl6ezml45AAAAAAAAAAAAAAAAAAAAnCz6/wEAAAAAAAAAAAAAAAAAAKB5+v8BAAAAAAAAAAAAAAAAAACgefr/AQAAAAAAAAAAAAAAAAAAoHm37t67sdLtrt5M6XzE5rc7aztr9WM9vrIRvRhEEdeiE09i2v1fq+vrH3dXr6WpxXh/8+F+/uHO2umD+aXp3wkcmV+q8+lg/ly0n88vRycuHp1fPjJ/Pt5957l8Fp349YsYxSDW42n2Wf6bpZQ++qR7KH9lOg8AAABOgiz948jr9yxLc3P11EPj9ZMvvj9QdQ7dHzh0fd2KK60GN85UOXnQzweDYvt4FftfyXjQz6/OHm/vp5vexYksnlRV9aI5rXha7L/7jxpf6vEuzkTEf/gSDf0g8b969qE3vRIAAAAAAAAAAABmMcPBwFZ93nb244RN7xEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAv9mBYwEAAAAAYf7WaXRsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABcFQAA//9AseWn") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x802c550a, &(0x7f0000000000)=ANY=[]) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) mlock2(&(0x7f0000338000/0x3000)=nil, 0x3000, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r0}, &(0x7f0000000200), &(0x7f0000000180)='%pB \x00'}, 0x20) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYRESHEX=r3], 0x4c}}, 0x0) request_key(&(0x7f0000000240)='id_legacy\x00', &(0x7f0000000280)={'syz', 0x2}, &(0x7f0000000340)='vfat\x00', 0x0) fsetxattr(r3, &(0x7f0000000080)=@known='security.apparmor\x00', &(0x7f0000000100)='}.^{(+!\x00', 0x8, 0x2) r4 = socket(0x2, 0x80805, 0x0) socket(0x2, 0x80805, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d0800fe007c05e8fe55a1150010000200142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000300)={0x0, 0x952f, 0x0, 0xb3}, 0x10) rename(&(0x7f0000000400)='./file0\x00', &(0x7f0000000c80)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_open_procfs(0x0, 0x0) 159.441959ms ago: executing program 5 (id=1846): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000004c0)={'#! ', './file0'}, 0xb) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000440), r5) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x0) write$nci(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="510301e8"], 0x4) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001080)=ANY=[@ANYBLOB="f4010000", @ANYRES16=r3, @ANYBLOB="010000000000fcdbdf251800000008000300", @ANYRES32=r6, @ANYBLOB="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"], 0x1f4}}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x6, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000020000000000000007000000186400000c000053bf2a52000000010085000000bcb4000000000400000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x9, 0x6d, &(0x7f0000000380)=""/109, 0x41100, 0x65, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x0, 0x10, 0x6, 0x5}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000400)=[0xffffffffffffffff], &(0x7f0000000500)=[{0x4, 0x4, 0x9, 0xc}, {0x1, 0x4, 0x8, 0x8}, {0x4, 0x1, 0xa, 0x5}, {0x2, 0x2, 0xd, 0x1}, {0x4, 0x2, 0x1, 0x9}], 0x10, 0x3, @void, @value}, 0x94) 128.547519ms ago: executing program 4 (id=1847): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x9c2, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_open_procfs(0x0, &(0x7f00000011c0)='net/protocols\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x82) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioperm(0x5, 0x8004, 0x6) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) 115.389759ms ago: executing program 2 (id=1848): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1, 0x0, 0x0, 0x200000}, 0x1f00) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='mem_return_failed\x00', r6}, 0x18) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000006380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="8b03000000000000000005"], 0x28}}, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095", @ANYRESHEX=r4, @ANYRESDEC=r3], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r7, 0x1, 0xe000, 0xfffffffd, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @private=0xa010102}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x54}}, 0x0) 102.131039ms ago: executing program 4 (id=1849): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = memfd_secret(0x80000) fcntl$setlease(r1, 0x400, 0x0) close(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f00000002c0), 0x93020007) prctl$PR_SET_NAME(0xf, 0x0) socket$netlink(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) ioprio_set$pid(0x3, 0x0, 0x0) ioprio_get$pid(0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r2}, &(0x7f0000000240), &(0x7f00000003c0)}, 0x20) 63.43287ms ago: executing program 0 (id=1850): r0 = syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) signalfd(r0, &(0x7f00000000c0)={[0xfffffffffffffc6f]}, 0x8) (async) r2 = signalfd(r0, &(0x7f00000000c0)={[0xfffffffffffffc6f]}, 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x8, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0xb}}, {@access_user}]}}) 63.20625ms ago: executing program 5 (id=1851): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0xfffffffe, 0x1000000, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 63.02755ms ago: executing program 4 (id=1852): ppoll(0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)) msgsnd(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="030000"], 0x0, 0x0) (fail_nth: 2) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0x1}, 0x0, 0x0, 0x800000000000000, 0x7, 0x2, 0x0, 0x3, 0xe6, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 287.22µs ago: executing program 0 (id=1853): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') (async, rerun: 64) rmdir(&(0x7f0000000000)='./file0/file0\x00') (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000440)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x85, 0x7a5, &(0x7f0000000f80)="$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") (async) clock_gettime(0x0, &(0x7f0000003b80)) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x403, 0x70b528, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xa1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0xba01, 0x0, 0x4004}, 0x810) 0s ago: executing program 5 (id=1854): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f00000007c0)={0x40, 0x0, &(0x7f0000001a80)=[{0x0}], 0x0, 0x10000000000000da}, 0x20) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000400)={[{@i_version}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nouser_xattr}, {@discard}, {@data_err_abort}], [{@seclabel}]}, 0x1, 0x43d, &(0x7f0000001cc0)="$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") openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000080)={0x10d140, 0x0, 0x10}, 0x18) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') pread64(r1, &(0x7f0000000080)=""/237, 0xed, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xd8d}, {0x0}], 0x2}, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00), 0x8) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040), 0x10) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2400000007060104000000000000000001000004050001000700000008000640fb0015957664540bac34a5a09f830000"], 0x24}}, 0x20040810) kernel console output (not intermixed with test programs): 09: 0000000000000000 [ 92.854374][ T6863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.854385][ T6863] R13: 0000000000000000 R14: 00007f8095535fa0 R15: 00007ffeadd591a8 [ 92.854399][ T6863] [ 93.084204][ T6862] loop5: detected capacity change from 0 to 8192 [ 93.362249][ T6879] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 93.655605][ T6888] netlink: 84 bytes leftover after parsing attributes in process `+}[@'. [ 93.722718][ T6892] loop5: detected capacity change from 0 to 1024 [ 93.738297][ T6892] EXT4-fs: Ignoring removed nomblk_io_submit option [ 93.777279][ T30] kauditd_printk_skb: 299 callbacks suppressed [ 93.777292][ T30] audit: type=1400 audit(1741684761.515:5798): avc: denied { setattr } for pid=6891 comm="syz.5.1087" name="file0" dev="loop5" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 93.918251][ T6899] loop1: detected capacity change from 0 to 1024 [ 93.919642][ T6892] xt_hashlimit: max too large, truncated to 1048576 [ 93.925970][ T6899] EXT4-fs: Ignoring removed bh option [ 93.937984][ T6892] Cannot find set identified by id 0 to match [ 93.952951][ T6899] FAULT_INJECTION: forcing a failure. [ 93.952951][ T6899] name failslab, interval 1, probability 0, space 0, times 0 [ 93.965625][ T6899] CPU: 0 UID: 0 PID: 6899 Comm: syz.1.1089 Not tainted 6.14.0-rc6-syzkaller-00003-g4d872d51bc9d #0 [ 93.965720][ T6899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 93.965731][ T6899] Call Trace: [ 93.965736][ T6899] [ 93.965742][ T6899] dump_stack_lvl+0xf2/0x150 [ 93.965768][ T6899] dump_stack+0x15/0x1a [ 93.965788][ T6899] should_fail_ex+0x24a/0x260 [ 93.965817][ T6899] should_failslab+0x8f/0xb0 [ 93.965923][ T6899] __kmalloc_noprof+0xab/0x3f0 [ 93.965941][ T6899] ? ext4_mb_init_cache+0x11c/0xbc0 [ 93.965966][ T6899] ext4_mb_init_cache+0x11c/0xbc0 [ 93.966043][ T6899] ? filemap_add_folio+0x12c/0x1b0 [ 93.966074][ T6899] ? __filemap_get_folio+0x46f/0x630 [ 93.966095][ T6899] ext4_mb_init_group+0x210/0x3b0 [ 93.966195][ T6899] ext4_mb_regular_allocator+0xc2a/0x23a0 [ 93.966242][ T6899] ? ext4_journal_check_start+0xf3/0x180 [ 93.966266][ T6899] ? should_fail_ex+0xd7/0x260 [ 93.966294][ T6899] ext4_mb_new_blocks+0x801/0x2020 [ 93.966382][ T6899] ? ext4_xattr_set_entry+0x138/0x1090 [ 93.966408][ T6899] ? ext4_xattr_set_entry+0xb99/0x1090 [ 93.966434][ T6899] ext4_new_meta_blocks+0xc1/0x1a0 [ 93.966461][ T6899] ext4_xattr_block_set+0x10f1/0x1a40 [ 93.966535][ T6899] ? check_xattrs+0x6af/0x7b0 [ 93.966566][ T6899] ext4_expand_extra_isize_ea+0xaa3/0x1000 [ 93.966596][ T6899] ? ext4_xattr_get+0x31a/0x480 [ 93.966659][ T6899] __ext4_expand_extra_isize+0x254/0x290 [ 93.966683][ T6899] __ext4_mark_inode_dirty+0x2c5/0x440 [ 93.966712][ T6899] ext4_dirty_inode+0x91/0xb0 [ 93.966730][ T6899] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 93.966826][ T6899] __mark_inode_dirty+0x166/0x7e0 [ 93.966854][ T6899] file_modified_flags+0x2ec/0x320 [ 93.966943][ T6899] file_modified+0x17/0x20 [ 93.966987][ T6899] ext4_buffered_write_iter+0x1cf/0x3c0 [ 93.967016][ T6899] ext4_file_write_iter+0x383/0xf20 [ 93.967061][ T6899] ? 0xffffffff81000000 [ 93.967074][ T6899] ? selinux_file_permission+0x22a/0x360 [ 93.967166][ T6899] ? __rcu_read_unlock+0x4e/0x70 [ 93.967184][ T6899] ? avc_policy_seqno+0x15/0x20 [ 93.967201][ T6899] ? selinux_file_permission+0x22a/0x360 [ 93.967232][ T6899] vfs_write+0x77b/0x920 [ 93.967283][ T6899] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 93.967316][ T6899] __x64_sys_pwrite64+0xf6/0x150 [ 93.967375][ T6899] x64_sys_call+0xab0/0x2dc0 [ 93.967397][ T6899] do_syscall_64+0xc9/0x1c0 [ 93.967422][ T6899] ? clear_bhb_loop+0x55/0xb0 [ 93.967501][ T6899] ? clear_bhb_loop+0x55/0xb0 [ 93.967601][ T6899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.967622][ T6899] RIP: 0033:0x7fc30bd5d169 [ 93.967633][ T6899] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.967685][ T6899] RSP: 002b:00007fc30a3c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 93.967700][ T6899] RAX: ffffffffffffffda RBX: 00007fc30bf75fa0 RCX: 00007fc30bd5d169 [ 93.967710][ T6899] RDX: 00000000200000c1 RSI: 00004000000000c0 RDI: 0000000000000007 [ 93.967720][ T6899] RBP: 00007fc30a3c7090 R08: 0000000000000000 R09: 0000000000000000 [ 93.967730][ T6899] R10: 0000000000009000 R11: 0000000000000246 R12: 0000000000000001 [ 93.967740][ T6899] R13: 0000000000000000 R14: 00007fc30bf75fa0 R15: 00007ffc3a5fb448 [ 93.967758][ T6899] [ 93.969486][ T6902] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 94.452887][ T6906] loop2: detected capacity change from 0 to 256 [ 94.590886][ T30] audit: type=1326 audit(1741684762.325:5799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6911 comm="syz.1.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc30bd5d169 code=0x7ffc0000 [ 94.614412][ T30] audit: type=1326 audit(1741684762.325:5800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6911 comm="syz.1.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fc30bd5d169 code=0x7ffc0000 [ 94.637770][ T30] audit: type=1326 audit(1741684762.325:5801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6911 comm="syz.1.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc30bd5d169 code=0x7ffc0000 [ 94.661175][ T30] audit: type=1326 audit(1741684762.325:5802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6911 comm="syz.1.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc30bd5d169 code=0x7ffc0000 [ 94.684652][ T30] audit: type=1326 audit(1741684762.325:5803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6911 comm="syz.1.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc30bd5d169 code=0x7ffc0000 [ 94.708032][ T30] audit: type=1326 audit(1741684762.325:5804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6911 comm="syz.1.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc30bd5d169 code=0x7ffc0000 [ 94.731333][ T30] audit: type=1326 audit(1741684762.325:5805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6911 comm="syz.1.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc30bd5d169 code=0x7ffc0000 [ 94.754748][ T30] audit: type=1326 audit(1741684762.325:5806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6911 comm="syz.1.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc30bd5d169 code=0x7ffc0000 [ 94.778162][ T30] audit: type=1326 audit(1741684762.325:5807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6911 comm="syz.1.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc30bd5d169 code=0x7ffc0000 [ 94.822620][ T6915] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 94.825739][ T6923] SELinux: security_context_str_to_sid () failed with errno=-22 [ 94.879826][ T6927] netlink: 84 bytes leftover after parsing attributes in process `+}[@'. [ 94.954584][ T6933] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1100'. [ 94.980829][ T6936] loop9: detected capacity change from 0 to 7 [ 95.006782][ T6936] Buffer I/O error on dev loop9, logical block 0, async page read [ 95.024380][ T6936] Buffer I/O error on dev loop9, logical block 0, async page read [ 95.032225][ T6936] loop9: unable to read partition table [ 95.042136][ T6936] loop_reread_partitions: partition scan of loop9 (被xڬdƤݡ [ 95.042136][ T6936] U) failed (rc=-5) [ 95.146123][ T6952] loop5: detected capacity change from 0 to 512 [ 95.152999][ T6952] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 95.177464][ T6952] EXT4-fs (loop5): 1 truncate cleaned up [ 95.183622][ T6952] EXT4-fs mount: 13 callbacks suppressed [ 95.183633][ T6952] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.219380][ T6196] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.314050][ T6961] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 95.327775][ T6966] loop2: detected capacity change from 0 to 512 [ 95.352263][ T6966] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 95.365449][ T6966] EXT4-fs (loop2): 1 truncate cleaned up [ 95.372593][ T6966] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.441826][ T6976] SELinux: security_context_str_to_sid () failed with errno=-22 [ 95.483410][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.521667][ T6984] IPv6: Can't replace route, no match found [ 95.546052][ T6987] loop2: detected capacity change from 0 to 512 [ 95.566399][ T6987] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.612896][ T6987] ext4 filesystem being mounted at /215/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 95.626684][ T6996] SELinux: security_context_str_to_sid () failed with errno=-22 [ 95.706954][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.740217][ T7004] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 95.871123][ T7010] loop0: detected capacity change from 0 to 8192 [ 95.951606][ T7018] loop1: detected capacity change from 0 to 512 [ 95.960272][ T7018] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -13 [ 96.013529][ T7018] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 96.039252][ T7018] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 96.050416][ T7018] EXT4-fs (loop1): 1 truncate cleaned up [ 96.056498][ T7018] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.186186][ T7018] EXT4-fs warning (device loop1): ext4_lookup:1825: Inconsistent encryption contexts: 2/12 [ 96.201501][ T7018] EXT4-fs warning (device loop1): ext4_lookup:1825: Inconsistent encryption contexts: 2/12 [ 96.245411][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.342007][ T7050] SELinux: security_context_str_to_sid () failed with errno=-22 [ 96.377040][ T7046] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 96.538779][ T7064] loop9: detected capacity change from 0 to 7 [ 96.544927][ T7064] Buffer I/O error on dev loop9, logical block 0, async page read [ 96.552792][ T7064] Buffer I/O error on dev loop9, logical block 0, async page read [ 96.560610][ T7064] loop9: unable to read partition table [ 96.566268][ T7064] loop_reread_partitions: partition scan of loop9 (被xڬdƤݡ [ 96.566268][ T7064] U) failed (rc=-5) [ 96.717061][ T7070] loop0: detected capacity change from 0 to 512 [ 96.854585][ T7070] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.868217][ T7070] ext4 filesystem being mounted at /199/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.452573][ T7088] loop1: detected capacity change from 0 to 8192 [ 97.508569][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.726569][ T7099] FAULT_INJECTION: forcing a failure. [ 97.726569][ T7099] name failslab, interval 1, probability 0, space 0, times 0 [ 97.739291][ T7099] CPU: 1 UID: 0 PID: 7099 Comm: syz.5.1158 Not tainted 6.14.0-rc6-syzkaller-00003-g4d872d51bc9d #0 [ 97.739312][ T7099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 97.739322][ T7099] Call Trace: [ 97.739328][ T7099] [ 97.739336][ T7099] dump_stack_lvl+0xf2/0x150 [ 97.739362][ T7099] dump_stack+0x15/0x1a [ 97.739383][ T7099] should_fail_ex+0x24a/0x260 [ 97.739432][ T7099] ? __hw_addr_add_ex+0x15a/0x430 [ 97.739458][ T7099] should_failslab+0x8f/0xb0 [ 97.739556][ T7099] __kmalloc_cache_noprof+0x4e/0x320 [ 97.739579][ T7099] ? __memcg_slab_post_alloc_hook+0x510/0x660 [ 97.739656][ T7099] __hw_addr_add_ex+0x15a/0x430 [ 97.739700][ T7099] ? __pfx_hsr_dev_setup+0x10/0x10 [ 97.739729][ T7099] dev_addr_init+0xb2/0x120 [ 97.739758][ T7099] ? __pfx_hsr_dev_setup+0x10/0x10 [ 97.739784][ T7099] alloc_netdev_mqs+0x225/0xab0 [ 97.739854][ T7099] rtnl_create_link+0x232/0x720 [ 97.739877][ T7099] rtnl_newlink_create+0x133/0x5d0 [ 97.739902][ T7099] ? ns_capable+0x7d/0xb0 [ 97.739920][ T7099] ? netlink_ns_capable+0x88/0xa0 [ 97.739960][ T7099] rtnl_newlink+0xe9f/0x1250 [ 97.739989][ T7099] ? bpf_ringbuf_reserve+0x46/0x60 [ 97.740043][ T7099] ? __rcu_read_unlock+0x34/0x70 [ 97.740071][ T7099] ? bpf_trace_run3+0x12b/0x1d0 [ 97.740094][ T7099] ? __memcg_slab_free_hook+0xc9/0x1e0 [ 97.740233][ T7099] ? mod_objcg_state+0x2ea/0x4f0 [ 97.740253][ T7099] ? __rcu_read_unlock+0x4e/0x70 [ 97.740271][ T7099] ? avc_has_perm_noaudit+0x1cc/0x210 [ 97.740311][ T7099] ? selinux_capable+0x1f2/0x260 [ 97.740334][ T7099] ? security_capable+0x81/0x90 [ 97.740530][ T7099] ? ns_capable+0x7d/0xb0 [ 97.740547][ T7099] ? __pfx_rtnl_newlink+0x10/0x10 [ 97.740570][ T7099] rtnetlink_rcv_msg+0x651/0x710 [ 97.740656][ T7099] ? ref_tracker_free+0x3a5/0x410 [ 97.740685][ T7099] netlink_rcv_skb+0x12c/0x230 [ 97.740708][ T7099] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 97.740733][ T7099] rtnetlink_rcv+0x1c/0x30 [ 97.740797][ T7099] netlink_unicast+0x599/0x670 [ 97.740939][ T7099] netlink_sendmsg+0x5cc/0x6e0 [ 97.740972][ T7099] ? __pfx_netlink_sendmsg+0x10/0x10 [ 97.741076][ T7099] __sock_sendmsg+0x140/0x180 [ 97.741103][ T7099] ____sys_sendmsg+0x326/0x4b0 [ 97.741131][ T7099] __sys_sendmsg+0x19d/0x230 [ 97.741161][ T7099] __x64_sys_sendmsg+0x46/0x50 [ 97.741183][ T7099] x64_sys_call+0x2734/0x2dc0 [ 97.741203][ T7099] do_syscall_64+0xc9/0x1c0 [ 97.741263][ T7099] ? clear_bhb_loop+0x55/0xb0 [ 97.741303][ T7099] ? clear_bhb_loop+0x55/0xb0 [ 97.741325][ T7099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.741351][ T7099] RIP: 0033:0x7f8c7b33d169 [ 97.741365][ T7099] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.741472][ T7099] RSP: 002b:00007f8c799a1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 97.741488][ T7099] RAX: ffffffffffffffda RBX: 00007f8c7b555fa0 RCX: 00007f8c7b33d169 [ 97.741498][ T7099] RDX: 0000000000000004 RSI: 0000400000000280 RDI: 0000000000000005 [ 97.741507][ T7099] RBP: 00007f8c799a1090 R08: 0000000000000000 R09: 0000000000000000 [ 97.741517][ T7099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.741571][ T7099] R13: 0000000000000000 R14: 00007f8c7b555fa0 R15: 00007ffc770a54e8 [ 97.741588][ T7099] [ 98.138015][ T7117] loop2: detected capacity change from 0 to 512 [ 98.164187][ T7117] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.191355][ T7117] ext4 filesystem being mounted at /224/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.244264][ T7117] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.256936][ T7129] SELinux: security_context_str_to_sid () failed with errno=-22 [ 98.340435][ T3378] IPVS: starting estimator thread 0... [ 98.400506][ T7147] loop5: detected capacity change from 0 to 2048 [ 98.425276][ T7149] loop2: detected capacity change from 0 to 512 [ 98.433262][ T7142] IPVS: using max 2832 ests per chain, 141600 per kthread [ 98.453475][ T7147] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.466315][ T7149] EXT4-fs: journaled quota format not specified [ 98.480837][ T7149] loop2: detected capacity change from 0 to 1024 [ 98.534304][ T7149] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.720656][ T7168] loop1: detected capacity change from 0 to 512 [ 98.745290][ T7168] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 98.754193][ T7168] EXT4-fs (loop1): orphan cleanup on readonly fs [ 98.760930][ T7168] EXT4-fs warning (device loop1): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 98.812355][ T7168] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 98.862963][ T7168] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1182: bg 0: block 40: padding at end of block bitmap is not set [ 98.895120][ T7168] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 98.919317][ T30] kauditd_printk_skb: 1124 callbacks suppressed [ 98.919396][ T30] audit: type=1326 audit(1741684766.655:6929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7178 comm="syz.0.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3f76d169 code=0x7ffc0000 [ 98.949348][ T30] audit: type=1326 audit(1741684766.655:6930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7178 comm="syz.0.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3f76d169 code=0x7ffc0000 [ 98.973611][ T7179] FAULT_INJECTION: forcing a failure. [ 98.973611][ T7179] name failslab, interval 1, probability 0, space 0, times 0 [ 98.986227][ T7179] CPU: 1 UID: 0 PID: 7179 Comm: syz.0.1185 Not tainted 6.14.0-rc6-syzkaller-00003-g4d872d51bc9d #0 [ 98.986306][ T7179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 98.986317][ T7179] Call Trace: [ 98.986323][ T7179] [ 98.986330][ T7179] dump_stack_lvl+0xf2/0x150 [ 98.986355][ T7179] dump_stack+0x15/0x1a [ 98.986374][ T7179] should_fail_ex+0x24a/0x260 [ 98.986421][ T7179] should_failslab+0x8f/0xb0 [ 98.986447][ T7179] kmem_cache_alloc_node_noprof+0x59/0x320 [ 98.986520][ T7179] ? __alloc_skb+0x10b/0x310 [ 98.986541][ T7179] __alloc_skb+0x10b/0x310 [ 98.986560][ T7179] ? audit_log_start+0x34c/0x6b0 [ 98.986590][ T7179] audit_log_start+0x368/0x6b0 [ 98.986655][ T7179] audit_seccomp+0x4b/0x130 [ 98.986762][ T7179] __seccomp_filter+0x6fa/0x1180 [ 98.986784][ T7179] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 98.986811][ T7179] ? vfs_write+0x644/0x920 [ 98.986864][ T7179] ? putname+0xcf/0xf0 [ 98.986884][ T7179] __secure_computing+0x9f/0x1c0 [ 98.986905][ T7179] syscall_trace_enter+0xd1/0x1f0 [ 98.986927][ T7179] ? fpregs_assert_state_consistent+0x83/0xa0 [ 98.986961][ T7179] do_syscall_64+0xaa/0x1c0 [ 98.986989][ T7179] ? clear_bhb_loop+0x55/0xb0 [ 98.987023][ T7179] ? clear_bhb_loop+0x55/0xb0 [ 98.987047][ T7179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.987072][ T7179] RIP: 0033:0x7fed3f76d169 [ 98.987093][ T7179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.987110][ T7179] RSP: 002b:00007fed3ddd1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 98.987168][ T7179] RAX: ffffffffffffffda RBX: 00007fed3f985fa0 RCX: 00007fed3f76d169 [ 98.987180][ T7179] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 98.987191][ T7179] RBP: 00007fed3ddd1090 R08: 0000000000000004 R09: 0000000000000000 [ 98.987203][ T7179] R10: 0000400000000080 R11: 0000000000000246 R12: 0000000000000001 [ 98.987214][ T7179] R13: 0000000000000000 R14: 00007fed3f985fa0 R15: 00007fff82718138 [ 98.987285][ T7179] [ 98.987294][ T7179] audit: audit_lost=4 audit_rate_limit=0 audit_backlog_limit=64 [ 98.999404][ T7168] EXT4-fs (loop1): 1 truncate cleaned up [ 99.008023][ T7179] audit: out of memory in audit_log_start [ 99.046217][ T30] audit: type=1326 audit(1741684766.705:6931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7178 comm="syz.0.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed3f76d169 code=0x7ffc0000 [ 99.047482][ T7168] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 99.051980][ T30] audit: type=1326 audit(1741684766.705:6932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7178 comm="syz.0.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3f76d169 code=0x7ffc0000 [ 99.270405][ T30] audit: type=1326 audit(1741684766.705:6933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7178 comm="syz.0.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fed3f76d169 code=0x7ffc0000 [ 99.293824][ T30] audit: type=1326 audit(1741684766.715:6934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7178 comm="syz.0.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3f76d169 code=0x7ffc0000 [ 99.317258][ T30] audit: type=1326 audit(1741684766.715:6935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7178 comm="syz.0.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fed3f76bad0 code=0x7ffc0000 [ 99.340806][ T30] audit: type=1326 audit(1741684766.715:6936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7178 comm="syz.0.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fed3f76bc1f code=0x7ffc0000 [ 99.364843][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.375076][ T6196] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.461177][ T7190] SELinux: security_context_str_to_sid () failed with errno=-22 [ 99.611124][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.687168][ T7205] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 99.799682][ T7230] SELinux: security_context_str_to_sid () failed with errno=-22 [ 99.810715][ T7232] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1196'. [ 99.821352][ T7232] tipc: New replicast peer: 10.1.1.2 [ 99.826956][ T7232] tipc: Enabled bearer , priority 10 [ 99.880823][ T7234] loop2: detected capacity change from 0 to 8192 [ 100.117856][ T7250] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1207'. [ 100.483040][ T7256] loop5: detected capacity change from 0 to 512 [ 100.493936][ T7257] SELinux: security_context_str_to_sid () failed with errno=-22 [ 100.686767][ T7248] Set syz1 is full, maxelem 65536 reached [ 100.746557][ T7272] FAULT_INJECTION: forcing a failure. [ 100.746557][ T7272] name failslab, interval 1, probability 0, space 0, times 0 [ 100.759275][ T7272] CPU: 1 UID: 0 PID: 7272 Comm: syz.2.1216 Not tainted 6.14.0-rc6-syzkaller-00003-g4d872d51bc9d #0 [ 100.759297][ T7272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 100.759307][ T7272] Call Trace: [ 100.759312][ T7272] [ 100.759318][ T7272] dump_stack_lvl+0xf2/0x150 [ 100.759341][ T7272] dump_stack+0x15/0x1a [ 100.759360][ T7272] should_fail_ex+0x24a/0x260 [ 100.759385][ T7272] should_failslab+0x8f/0xb0 [ 100.759410][ T7272] kmem_cache_alloc_noprof+0x52/0x320 [ 100.759429][ T7272] ? vm_area_dup+0x98/0x130 [ 100.759449][ T7272] vm_area_dup+0x98/0x130 [ 100.759468][ T7272] __split_vma+0xf7/0x6a0 [ 100.759490][ T7272] vms_gather_munmap_vmas+0x171/0x7a0 [ 100.759516][ T7272] ? mas_walk+0x204/0x320 [ 100.759540][ T7272] mmap_region+0x464/0x1620 [ 100.759556][ T7272] ? __rcu_read_unlock+0x4e/0x70 [ 100.759573][ T7272] ? mntput_no_expire+0x70/0x3d0 [ 100.759596][ T7272] ? mntput+0x49/0x70 [ 100.759612][ T7272] ? terminate_walk+0x260/0x280 [ 100.759648][ T7272] do_mmap+0x98a/0xc30 [ 100.759674][ T7272] vm_mmap_pgoff+0x16d/0x2d0 [ 100.759701][ T7272] ksys_mmap_pgoff+0x286/0x330 [ 100.759727][ T7272] x64_sys_call+0x1940/0x2dc0 [ 100.759748][ T7272] do_syscall_64+0xc9/0x1c0 [ 100.759772][ T7272] ? clear_bhb_loop+0x55/0xb0 [ 100.759793][ T7272] ? clear_bhb_loop+0x55/0xb0 [ 100.759811][ T7272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.759830][ T7272] RIP: 0033:0x7f809531d169 [ 100.759842][ T7272] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.759863][ T7272] RSP: 002b:00007f8093981038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 100.759879][ T7272] RAX: ffffffffffffffda RBX: 00007f8095535fa0 RCX: 00007f809531d169 [ 100.759890][ T7272] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000400000ffd000 [ 100.759900][ T7272] RBP: 00007f8093981090 R08: 0000000000000007 R09: 0000000000000000 [ 100.759910][ T7272] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 100.759919][ T7272] R13: 0000000000000000 R14: 00007f8095535fa0 R15: 00007ffeadd591a8 [ 100.759933][ T7272] [ 101.066554][ T7279] loop5: detected capacity change from 0 to 1024 [ 101.176422][ T7279] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.189621][ T7279] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.386547][ T7279] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 101.447825][ T7279] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 5 with max blocks 3 with error 28 [ 101.460100][ T7279] EXT4-fs (loop5): This should not happen!! Data will be lost [ 101.460100][ T7279] [ 101.469756][ T7279] EXT4-fs (loop5): Total free blocks count 0 [ 101.475805][ T7279] EXT4-fs (loop5): Free/Dirty block details [ 101.481681][ T7279] EXT4-fs (loop5): free_blocks=4293918720 [ 101.487423][ T7279] EXT4-fs (loop5): dirty_blocks=0 [ 101.492468][ T7279] EXT4-fs (loop5): Block reservation details [ 101.498461][ T7279] EXT4-fs (loop5): i_reserved_data_blocks=0 [ 101.709977][ T6196] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.786456][ T7297] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1223'. [ 101.797393][ T7297] tipc: Started in network mode [ 101.802279][ T7297] tipc: Node identity ac14140f, cluster identity 4711 [ 101.809246][ T7297] tipc: New replicast peer: 10.1.1.2 [ 101.814770][ T7297] tipc: Enabled bearer , priority 10 [ 101.840792][ T7299] SELinux: security_context_str_to_sid () failed with errno=-22 [ 101.874397][ T7309] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1228'. [ 102.011995][ T7320] FAULT_INJECTION: forcing a failure. [ 102.011995][ T7320] name failslab, interval 1, probability 0, space 0, times 0 [ 102.024662][ T7320] CPU: 0 UID: 0 PID: 7320 Comm: syz.2.1232 Not tainted 6.14.0-rc6-syzkaller-00003-g4d872d51bc9d #0 [ 102.024732][ T7320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 102.024744][ T7320] Call Trace: [ 102.024750][ T7320] [ 102.024787][ T7320] dump_stack_lvl+0xf2/0x150 [ 102.024886][ T7320] dump_stack+0x15/0x1a [ 102.024949][ T7320] should_fail_ex+0x24a/0x260 [ 102.024976][ T7320] should_failslab+0x8f/0xb0 [ 102.025024][ T7320] __kmalloc_node_noprof+0xad/0x410 [ 102.025045][ T7320] ? __kvmalloc_node_noprof+0x72/0x170 [ 102.025110][ T7320] __kvmalloc_node_noprof+0x72/0x170 [ 102.025133][ T7320] nf_hook_entries_grow+0x1bd/0x470 [ 102.025165][ T7320] __nf_register_net_hook+0x16b/0x480 [ 102.025195][ T7320] nf_register_net_hook+0x88/0x130 [ 102.025226][ T7320] nf_register_net_hooks+0x41/0x140 [ 102.025257][ T7320] nf_ct_netns_do_get+0x2a6/0x370 [ 102.025282][ T7320] ? nf_register_net_hook+0x9e/0x130 [ 102.025339][ T7320] nf_ct_netns_get+0x83/0xb0 [ 102.025365][ T7320] connlimit_mt_check+0x49/0x150 [ 102.025469][ T7320] xt_check_match+0x259/0x4b0 [ 102.025537][ T7320] ? strnlen+0x28/0x50 [ 102.025628][ T7320] ? strcmp+0x21/0x50 [ 102.025645][ T7320] ? xt_find_match+0x1cc/0x200 [ 102.025677][ T7320] translate_table+0xab1/0xfb0 [ 102.025709][ T7320] do_ipt_set_ctl+0x7bd/0x8b0 [ 102.025728][ T7320] ? tcp_release_cb+0xfe/0x380 [ 102.025759][ T7320] nf_setsockopt+0x195/0x1b0 [ 102.025860][ T7320] ip_setsockopt+0xea/0x100 [ 102.025882][ T7320] tcp_setsockopt+0x93/0xb0 [ 102.025911][ T7320] sock_common_setsockopt+0x64/0x80 [ 102.026007][ T7320] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 102.026034][ T7320] __sys_setsockopt+0x187/0x200 [ 102.026059][ T7320] __x64_sys_setsockopt+0x66/0x80 [ 102.026147][ T7320] x64_sys_call+0x282e/0x2dc0 [ 102.026168][ T7320] do_syscall_64+0xc9/0x1c0 [ 102.026198][ T7320] ? clear_bhb_loop+0x55/0xb0 [ 102.026301][ T7320] ? clear_bhb_loop+0x55/0xb0 [ 102.026322][ T7320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.026343][ T7320] RIP: 0033:0x7f809531d169 [ 102.026355][ T7320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.026370][ T7320] RSP: 002b:00007f8093981038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 102.026433][ T7320] RAX: ffffffffffffffda RBX: 00007f8095535fa0 RCX: 00007f809531d169 [ 102.026443][ T7320] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 102.026453][ T7320] RBP: 00007f8093981090 R08: 0000000000000570 R09: 0000000000000000 [ 102.026464][ T7320] R10: 0000400000000900 R11: 0000000000000246 R12: 0000000000000001 [ 102.026473][ T7320] R13: 0000000000000000 R14: 00007f8095535fa0 R15: 00007ffeadd591a8 [ 102.026490][ T7320] [ 102.027611][ T7320] xt_connlimit: cannot load conntrack support for proto=2 [ 102.328693][ T7328] loop2: detected capacity change from 0 to 2048 [ 102.355295][ T7328] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.1235: bad orphan inode 8192 [ 102.366295][ T7328] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.409384][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.479308][ T7341] loop2: detected capacity change from 0 to 8192 [ 102.606749][ T7351] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1244'. [ 102.624596][ T7351] team0 (unregistering): Port device team_slave_0 removed [ 102.634258][ T7354] loop2: detected capacity change from 0 to 256 [ 102.642727][ T7351] team0 (unregistering): Port device team_slave_1 removed [ 102.658993][ T7354] FAT-fs (loop2): Directory bread(block 64) failed [ 102.665872][ T7354] FAT-fs (loop2): Directory bread(block 65) failed [ 102.668047][ T7357] SELinux: security_context_str_to_sid () failed with errno=-22 [ 102.672438][ T7354] FAT-fs (loop2): Directory bread(block 66) failed [ 102.687659][ T7354] FAT-fs (loop2): Directory bread(block 67) failed [ 102.694254][ T7354] FAT-fs (loop2): Directory bread(block 68) failed [ 102.700877][ T7354] FAT-fs (loop2): Directory bread(block 69) failed [ 102.708974][ T7354] FAT-fs (loop2): Directory bread(block 70) failed [ 102.735525][ T7354] FAT-fs (loop2): Directory bread(block 71) failed [ 102.743219][ T7354] FAT-fs (loop2): Directory bread(block 72) failed [ 102.749780][ T7354] FAT-fs (loop2): Directory bread(block 73) failed [ 102.765456][ T7361] loop0: detected capacity change from 0 to 2048 [ 102.784251][ T7361] EXT4-fs error (device loop0): ext4_orphan_get:1415: comm syz.0.1248: bad orphan inode 8192 [ 102.795056][ T7361] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.817211][ T3375] tipc: Node number set to 2886997007 [ 102.824541][ T7364] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1247'. [ 102.865954][ T7364] Cannot find add_set index 0 as target [ 102.872892][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.920572][ T7371] SELinux: security_context_str_to_sid () failed with errno=-22 [ 103.010769][ T7378] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1252'. [ 103.023735][ T7378] tipc: New replicast peer: 10.1.1.2 [ 103.029126][ T7378] tipc: Enabled bearer , priority 10 [ 103.052300][ T7359] Set syz1 is full, maxelem 65536 reached [ 103.331703][ T7393] SELinux: security_context_str_to_sid () failed with errno=-22 [ 103.356598][ T7395] loop1: detected capacity change from 0 to 2048 [ 103.374610][ T7395] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.386840][ T7395] ext4 filesystem being mounted at /239/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.499898][ T7399] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1258: bg 0: block 345: padding at end of block bitmap is not set [ 103.514504][ T7399] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 103.526953][ T7399] EXT4-fs (loop1): This should not happen!! Data will be lost [ 103.526953][ T7399] [ 103.550038][ T12] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 117 [ 103.562699][ T12] EXT4-fs (loop1): This should not happen!! Data will be lost [ 103.562699][ T12] [ 103.586925][ T12] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 2081 with max blocks 2024 with error 28 [ 103.599740][ T12] EXT4-fs (loop1): This should not happen!! Data will be lost [ 103.599740][ T12] [ 103.609485][ T12] EXT4-fs (loop1): Total free blocks count 0 [ 103.615459][ T12] EXT4-fs (loop1): Free/Dirty block details [ 103.621339][ T12] EXT4-fs (loop1): free_blocks=0 [ 103.748120][ T7401] loop1: detected capacity change from 0 to 512 [ 103.756554][ T7401] EXT4-fs (loop1): inodes count not valid: 10 vs 32 [ 103.795626][ T7404] loop1: detected capacity change from 0 to 2048 [ 103.819062][ T3378] IPVS: starting estimator thread 0... [ 103.829210][ T7404] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.1260: bad orphan inode 8192 [ 103.847035][ T7404] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.880959][ T7419] loop2: detected capacity change from 0 to 512 [ 103.887444][ T7419] EXT4-fs: Ignoring removed i_version option [ 103.893540][ T7419] EXT4-fs: Ignoring removed mblk_io_submit option [ 103.900170][ T7419] ext4: Unknown parameter 'nouser_xattr' [ 103.900664][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.921268][ T7409] IPVS: using max 3024 ests per chain, 151200 per kthread [ 103.943375][ T7423] SELinux: security_context_str_to_sid () failed with errno=-22 [ 103.996954][ T7431] tipc: Enabling of bearer rejected, already enabled [ 104.023238][ T30] kauditd_printk_skb: 194 callbacks suppressed [ 104.023252][ T30] audit: type=1400 audit(1741684771.715:7131): avc: denied { getopt } for pid=7428 comm="syz.2.1271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 104.065365][ T7433] loop2: detected capacity change from 0 to 512 [ 104.073945][ T7433] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 104.096566][ T7433] EXT4-fs (loop2): 1 truncate cleaned up [ 104.102526][ T7433] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.134450][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.138451][ T30] audit: type=1326 audit(1741684771.875:7132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7446 comm="syz.4.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3e1efd169 code=0x7ffc0000 [ 104.143534][ T3375] tipc: Node number set to 2013265920 [ 104.166818][ T30] audit: type=1326 audit(1741684771.875:7133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7446 comm="syz.4.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc3e1efbad0 code=0x7ffc0000 [ 104.195614][ T30] audit: type=1326 audit(1741684771.875:7134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7446 comm="syz.4.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3e1efd169 code=0x7ffc0000 [ 104.219180][ T30] audit: type=1326 audit(1741684771.875:7135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7446 comm="syz.4.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3e1efd169 code=0x7ffc0000 [ 104.243167][ T30] audit: type=1326 audit(1741684771.905:7136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7446 comm="syz.4.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc3e1efd169 code=0x7ffc0000 [ 104.266791][ T30] audit: type=1326 audit(1741684771.905:7137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7446 comm="syz.4.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3e1efd169 code=0x7ffc0000 [ 104.290278][ T30] audit: type=1326 audit(1741684771.905:7138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7446 comm="syz.4.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3e1efd169 code=0x7ffc0000 [ 104.313685][ T30] audit: type=1326 audit(1741684771.905:7139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7446 comm="syz.4.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc3e1efd169 code=0x7ffc0000 [ 104.337124][ T30] audit: type=1326 audit(1741684771.905:7140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7446 comm="syz.4.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3e1efd169 code=0x7ffc0000 [ 104.416023][ T7455] loop9: detected capacity change from 0 to 7 [ 104.422185][ T7455] Buffer I/O error on dev loop9, logical block 0, async page read [ 104.430202][ T7455] Buffer I/O error on dev loop9, logical block 0, async page read [ 104.438077][ T7455] loop9: unable to read partition table [ 104.443880][ T7455] loop_reread_partitions: partition scan of loop9 (被xڬdƤݡ [ 104.443880][ T7455] U) failed (rc=-5) [ 104.576793][ T7460] loop2: detected capacity change from 0 to 512 [ 104.583434][ T7460] EXT4-fs: Ignoring removed i_version option [ 104.589418][ T7460] EXT4-fs: Ignoring removed mblk_io_submit option [ 104.595891][ T7460] ext4: Unknown parameter 'nouser_xattr' [ 104.628749][ T7462] SELinux: security_context_str_to_sid () failed with errno=-22 [ 104.650860][ T7464] loop2: detected capacity change from 0 to 512 [ 104.685252][ T7464] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.698758][ T7464] ext4 filesystem being mounted at /261/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.711785][ T7469] tipc: Started in network mode [ 104.716768][ T7469] tipc: Node identity ac14140f, cluster identity 4711 [ 104.723680][ T7469] tipc: New replicast peer: 10.1.1.2 [ 104.729030][ T7469] tipc: Enabled bearer , priority 10 [ 104.736014][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.765871][ T7475] loop0: detected capacity change from 0 to 512 [ 104.802346][ T7475] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.823869][ T7479] loop1: detected capacity change from 0 to 512 [ 104.830886][ T7479] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 104.837640][ T7475] ext4 filesystem being mounted at /224/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.842830][ T7479] EXT4-fs (loop1): 1 truncate cleaned up [ 104.857908][ T7479] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.894462][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.903963][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.946057][ T7488] loop0: detected capacity change from 0 to 8192 [ 104.996411][ T7491] loop2: detected capacity change from 0 to 2048 [ 105.026964][ T7491] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.102919][ T7506] SELinux: security_context_str_to_sid () failed with errno=-22 [ 105.148773][ T7514] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1298'. [ 105.168968][ T7514] bridge0: port 3(team0) entered disabled state [ 105.181243][ T7514] team0 (unregistering): left allmulticast mode [ 105.187601][ T7514] team_slave_0: left allmulticast mode [ 105.193088][ T7514] team_slave_1: left allmulticast mode [ 105.198834][ T7514] bridge0: port 3(team0) entered disabled state [ 105.205871][ T7514] team_slave_0: left promiscuous mode [ 105.217172][ T7514] team0 (unregistering): Port device team_slave_0 removed [ 105.224643][ T7514] team_slave_1: left promiscuous mode [ 105.233104][ T7514] team0 (unregistering): Port device team_slave_1 removed [ 105.368663][ T7534] loop9: detected capacity change from 0 to 7 [ 105.374968][ T7534] Buffer I/O error on dev loop9, logical block 0, async page read [ 105.382846][ T7534] Buffer I/O error on dev loop9, logical block 0, async page read [ 105.390675][ T7534] loop9: unable to read partition table [ 105.396440][ T7534] loop_reread_partitions: partition scan of loop9 (被xڬdƤݡ [ 105.396440][ T7534] U) failed (rc=-5) [ 105.583403][ T7550] loop0: detected capacity change from 0 to 8192 [ 105.723232][ T3379] tipc: Node number set to 2886997007 [ 105.761538][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.787170][ T7561] tipc: Enabling of bearer rejected, already enabled [ 105.795456][ T7559] loop2: detected capacity change from 0 to 2048 [ 105.816635][ T7559] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.840034][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.862198][ T7568] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1313'. [ 105.872409][ T7568] tipc: Enabling of bearer rejected, already enabled [ 105.906818][ T7575] SELinux: security_context_str_to_sid () failed with errno=-22 [ 105.949186][ T7580] random: crng reseeded on system resumption [ 106.193991][ T7606] loop2: detected capacity change from 0 to 2048 [ 106.205330][ T7608] SELinux: security_context_str_to_sid () failed with errno=-22 [ 106.215992][ T7606] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.241964][ T7597] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 106.668520][ T7640] loop0: detected capacity change from 0 to 512 [ 106.675033][ T7640] EXT4-fs: Ignoring removed i_version option [ 106.681021][ T7640] EXT4-fs: Ignoring removed mblk_io_submit option [ 106.687504][ T7640] ext4: Unknown parameter 'nouser_xattr' [ 106.715871][ T7643] SELinux: security_context_str_to_sid () failed with errno=-22 [ 106.787958][ T7655] loop5: detected capacity change from 0 to 512 [ 106.796535][ T7655] EXT4-fs: Ignoring removed i_version option [ 106.802582][ T7655] EXT4-fs: Ignoring removed mblk_io_submit option [ 106.810467][ T7655] ext4: Unknown parameter 'nouser_xattr' [ 106.819798][ T7658] netlink: 1300 bytes leftover after parsing attributes in process `syz.0.1344'. [ 106.940284][ T7675] loop5: detected capacity change from 0 to 512 [ 106.947111][ T7675] EXT4-fs: Ignoring removed i_version option [ 106.953146][ T7675] EXT4-fs: Ignoring removed mblk_io_submit option [ 106.959963][ T7675] ext4: Unknown parameter 'nouser_xattr' [ 106.991686][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.104232][ T7683] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 107.158941][ T7699] FAULT_INJECTION: forcing a failure. [ 107.158941][ T7699] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 107.172102][ T7699] CPU: 0 UID: 0 PID: 7699 Comm: syz.2.1360 Not tainted 6.14.0-rc6-syzkaller-00003-g4d872d51bc9d #0 [ 107.172123][ T7699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 107.172155][ T7699] Call Trace: [ 107.172161][ T7699] [ 107.172167][ T7699] dump_stack_lvl+0xf2/0x150 [ 107.172193][ T7699] dump_stack+0x15/0x1a [ 107.172213][ T7699] should_fail_ex+0x24a/0x260 [ 107.172241][ T7699] should_fail+0xb/0x10 [ 107.172337][ T7699] should_fail_usercopy+0x1a/0x20 [ 107.172367][ T7699] _copy_from_user+0x1c/0xa0 [ 107.172386][ T7699] __sys_bpf+0x14e/0x7a0 [ 107.172432][ T7699] __x64_sys_bpf+0x43/0x50 [ 107.172452][ T7699] x64_sys_call+0x2914/0x2dc0 [ 107.172555][ T7699] do_syscall_64+0xc9/0x1c0 [ 107.172643][ T7699] ? clear_bhb_loop+0x55/0xb0 [ 107.172668][ T7699] ? clear_bhb_loop+0x55/0xb0 [ 107.172691][ T7699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.172792][ T7699] RIP: 0033:0x7f809531d169 [ 107.172807][ T7699] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.172864][ T7699] RSP: 002b:00007f8093981038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 107.172936][ T7699] RAX: ffffffffffffffda RBX: 00007f8095535fa0 RCX: 00007f809531d169 [ 107.172949][ T7699] RDX: 0000000000000028 RSI: 00004000000009c0 RDI: 0000000000000012 [ 107.172961][ T7699] RBP: 00007f8093981090 R08: 0000000000000000 R09: 0000000000000000 [ 107.172972][ T7699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.172983][ T7699] R13: 0000000000000000 R14: 00007f8095535fa0 R15: 00007ffeadd591a8 [ 107.172999][ T7699] [ 107.185388][ T7703] loop5: detected capacity change from 0 to 512 [ 107.285880][ T7707] loop0: detected capacity change from 0 to 512 [ 107.295509][ T7703] EXT4-fs: Ignoring removed i_version option [ 107.314899][ T7707] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.317605][ T7703] EXT4-fs: Ignoring removed mblk_io_submit option [ 107.326694][ T7707] ext4 filesystem being mounted at /245/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 107.333558][ T7703] ext4: Unknown parameter 'nouser_xattr' [ 107.524226][ T7719] loop5: detected capacity change from 0 to 2048 [ 107.695809][ T7719] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.891736][ T7739] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 108.012105][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.085655][ T7753] loop1: detected capacity change from 0 to 2048 [ 108.095610][ T7747] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 108.116991][ T7753] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.1378: bad orphan inode 8192 [ 108.141550][ T7753] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.163971][ T7761] program syz.2.1381 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 108.237170][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.265247][ T6196] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.331533][ T7777] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 108.338124][ T7777] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 108.345635][ T7777] vhci_hcd vhci_hcd.0: Device attached [ 108.383874][ T7778] vhci_hcd: connection closed [ 108.384009][ T29] vhci_hcd: stop threads [ 108.393020][ T29] vhci_hcd: release socket [ 108.397522][ T29] vhci_hcd: disconnect device [ 108.438403][ T7783] loop1: detected capacity change from 0 to 512 [ 108.446845][ T7787] FAULT_INJECTION: forcing a failure. [ 108.446845][ T7787] name failslab, interval 1, probability 0, space 0, times 0 [ 108.459474][ T7787] CPU: 1 UID: 0 PID: 7787 Comm: syz.2.1392 Not tainted 6.14.0-rc6-syzkaller-00003-g4d872d51bc9d #0 [ 108.459560][ T7787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 108.459569][ T7787] Call Trace: [ 108.459574][ T7787] [ 108.459580][ T7787] dump_stack_lvl+0xf2/0x150 [ 108.459652][ T7787] dump_stack+0x15/0x1a [ 108.459670][ T7787] should_fail_ex+0x24a/0x260 [ 108.459693][ T7787] ? md_alloc+0x99/0xa00 [ 108.459714][ T7787] should_failslab+0x8f/0xb0 [ 108.459783][ T7787] __kmalloc_cache_noprof+0x4e/0x320 [ 108.459804][ T7787] md_alloc+0x99/0xa00 [ 108.459827][ T7787] ? __pfx_resume_store+0x10/0x10 [ 108.459851][ T7787] md_alloc_and_put+0x18/0x150 [ 108.460029][ T7787] md_probe+0x79/0x90 [ 108.460054][ T7787] ? __pfx_md_probe+0x10/0x10 [ 108.460136][ T7787] blk_request_module+0x1bb/0x1e0 [ 108.460161][ T7787] blkdev_get_no_open+0x43/0xe0 [ 108.460195][ T7787] bdev_file_open_by_dev+0x99/0x220 [ 108.460221][ T7787] ? __pfx_resume_store+0x10/0x10 [ 108.460239][ T7787] swsusp_check+0x3f/0x260 [ 108.460343][ T7787] software_resume+0x43/0x2e0 [ 108.460362][ T7787] resume_store+0x34e/0x3a0 [ 108.460381][ T7787] kobj_attr_store+0x47/0x70 [ 108.460447][ T7787] ? __pfx_kobj_attr_store+0x10/0x10 [ 108.460466][ T7787] sysfs_kf_write+0xae/0xd0 [ 108.460487][ T7787] ? __pfx_sysfs_kf_write+0x10/0x10 [ 108.460507][ T7787] kernfs_fop_write_iter+0x1c8/0x2c0 [ 108.460614][ T7787] vfs_write+0x77b/0x920 [ 108.460637][ T7787] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 108.460668][ T7787] ksys_write+0xe8/0x1b0 [ 108.460774][ T7787] __x64_sys_write+0x42/0x50 [ 108.460797][ T7787] x64_sys_call+0x287e/0x2dc0 [ 108.460875][ T7787] do_syscall_64+0xc9/0x1c0 [ 108.460899][ T7787] ? clear_bhb_loop+0x55/0xb0 [ 108.460927][ T7787] ? clear_bhb_loop+0x55/0xb0 [ 108.461016][ T7787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.461038][ T7787] RIP: 0033:0x7f809531d169 [ 108.461052][ T7787] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.461067][ T7787] RSP: 002b:00007f8093981038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 108.461085][ T7787] RAX: ffffffffffffffda RBX: 00007f8095535fa0 RCX: 00007f809531d169 [ 108.461096][ T7787] RDX: 0000000000000012 RSI: 0000400000000040 RDI: 0000000000000006 [ 108.461106][ T7787] RBP: 00007f8093981090 R08: 0000000000000000 R09: 0000000000000000 [ 108.461184][ T7787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.461194][ T7787] R13: 0000000000000000 R14: 00007f8095535fa0 R15: 00007ffeadd591a8 [ 108.461319][ T7787] [ 108.477028][ T7783] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.579971][ T7789] veth0_macvtap: left promiscuous mode [ 108.583885][ T7783] ext4 filesystem being mounted at /263/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 108.746574][ T7789] macvtap0: entered promiscuous mode [ 108.812359][ T7810] loop2: detected capacity change from 0 to 2048 [ 108.841908][ T7810] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.928252][ T7819] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1400'. [ 108.938623][ T7819] tipc: Enabling of bearer rejected, already enabled [ 109.048007][ T7823] loop0: detected capacity change from 0 to 256 [ 109.060293][ T7823] FAT-fs (loop0): Directory bread(block 64) failed [ 109.066891][ T7823] FAT-fs (loop0): Directory bread(block 65) failed [ 109.073468][ T7823] FAT-fs (loop0): Directory bread(block 66) failed [ 109.080036][ T7823] FAT-fs (loop0): Directory bread(block 67) failed [ 109.086682][ T7823] FAT-fs (loop0): Directory bread(block 68) failed [ 109.093230][ T7823] FAT-fs (loop0): Directory bread(block 69) failed [ 109.099740][ T7823] FAT-fs (loop0): Directory bread(block 70) failed [ 109.106299][ T7823] FAT-fs (loop0): Directory bread(block 71) failed [ 109.112808][ T7823] FAT-fs (loop0): Directory bread(block 72) failed [ 109.119578][ T7823] FAT-fs (loop0): Directory bread(block 73) failed [ 109.139953][ T30] kauditd_printk_skb: 442 callbacks suppressed [ 109.139987][ T30] audit: type=1326 audit(1741684776.875:7583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7824 comm="syz.5.1403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c7b33d169 code=0x7ffc0000 [ 109.169670][ T30] audit: type=1326 audit(1741684776.895:7584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7824 comm="syz.5.1403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c7b33d169 code=0x7ffc0000 [ 109.193200][ T30] audit: type=1326 audit(1741684776.895:7585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7824 comm="syz.5.1403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8c7b33d169 code=0x7ffc0000 [ 109.216979][ T30] audit: type=1326 audit(1741684776.895:7586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7824 comm="syz.5.1403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c7b33d169 code=0x7ffc0000 [ 109.240438][ T30] audit: type=1326 audit(1741684776.895:7587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7824 comm="syz.5.1403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8c7b33d169 code=0x7ffc0000 [ 109.263951][ T30] audit: type=1326 audit(1741684776.895:7588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7824 comm="syz.5.1403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c7b33d169 code=0x7ffc0000 [ 109.287492][ T30] audit: type=1326 audit(1741684776.895:7589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7824 comm="syz.5.1403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8c7b33d169 code=0x7ffc0000 [ 109.310904][ T30] audit: type=1326 audit(1741684776.895:7590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7824 comm="syz.5.1403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c7b33d169 code=0x7ffc0000 [ 109.334319][ T30] audit: type=1326 audit(1741684776.895:7591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7824 comm="syz.5.1403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8c7b33d169 code=0x7ffc0000 [ 109.357738][ T30] audit: type=1326 audit(1741684776.895:7592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7824 comm="syz.5.1403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c7b33d169 code=0x7ffc0000 [ 109.406891][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.447742][ T7835] loop2: detected capacity change from 0 to 2048 [ 109.462569][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.474701][ T7835] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.1407: bad orphan inode 8192 [ 109.485591][ T7835] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.508813][ T3378] Process accounting resumed [ 109.522023][ T7842] SELinux: security_context_str_to_sid () failed with errno=-22 [ 109.540048][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.563420][ T7847] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1410'. [ 109.575413][ T7847] block device autoloading is deprecated and will be removed. [ 109.582988][ T7847] syz.2.1410: attempt to access beyond end of device [ 109.582988][ T7847] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 109.604110][ T7850] loop0: detected capacity change from 0 to 512 [ 109.611704][ T7850] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 109.624429][ T7850] EXT4-fs (loop0): 1 truncate cleaned up [ 109.630468][ T7850] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.653929][ T7855] loop2: detected capacity change from 0 to 8192 [ 109.654536][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.875842][ T7877] loop0: detected capacity change from 0 to 512 [ 109.884554][ T7877] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.897124][ T7877] ext4 filesystem being mounted at /261/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 109.930120][ T7881] loop2: detected capacity change from 0 to 2048 [ 109.944883][ T7881] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.1420: bad orphan inode 8192 [ 109.955606][ T7881] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.023769][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.050155][ T7885] loop5: detected capacity change from 0 to 1024 [ 110.052039][ T7887] SELinux: security_context_str_to_sid () failed with errno=-22 [ 110.077262][ T7885] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.131327][ T7885] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.216239][ T7893] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 110.303774][ T7904] loop2: detected capacity change from 0 to 8192 [ 110.312795][ T7905] netlink: 'syz.5.1427': attribute type 4 has an invalid length. [ 110.620486][ T7917] SELinux: security_context_str_to_sid () failed with errno=-22 [ 110.630007][ T7915] uprobe: syz.1.1431:7915 failed to unregister, leaking uprobe [ 110.653400][ T7919] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1434'. [ 110.676712][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.682576][ T7921] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1435'. [ 110.765056][ T7929] loop0: detected capacity change from 0 to 512 [ 110.772880][ T7929] EXT4-fs: Ignoring removed i_version option [ 110.778967][ T7929] EXT4-fs: Ignoring removed mblk_io_submit option [ 110.785704][ T7929] ext4: Unknown parameter 'nouser_xattr' [ 110.954810][ T7945] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=7945 comm=syz.1.1445 [ 111.031745][ T7953] netlink: 'syz.0.1448': attribute type 9 has an invalid length. [ 111.039862][ T7953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1448'. [ 111.052736][ T7951] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1447'. [ 111.066479][ T7953] hsr0: entered promiscuous mode [ 111.071557][ T7953] macvlan3: entered promiscuous mode [ 111.076981][ T7953] macvlan3: entered allmulticast mode [ 111.082410][ T7953] hsr0: entered allmulticast mode [ 111.087456][ T7953] hsr_slave_0: entered allmulticast mode [ 111.093070][ T7953] hsr_slave_1: entered allmulticast mode [ 111.137873][ T7961] loop2: detected capacity change from 0 to 512 [ 111.147201][ T7961] EXT4-fs: Ignoring removed i_version option [ 111.153257][ T7961] EXT4-fs: Ignoring removed mblk_io_submit option [ 111.159818][ T7961] ext4: Unknown parameter 'nouser_xattr' [ 111.183982][ T7963] loop1: detected capacity change from 0 to 4096 [ 111.192672][ T7963] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.225629][ T7963] nfs4: Bad value for 'source' [ 111.233698][ T7975] FAULT_INJECTION: forcing a failure. [ 111.233698][ T7975] name failslab, interval 1, probability 0, space 0, times 0 [ 111.246416][ T7975] CPU: 0 UID: 0 PID: 7975 Comm: syz.2.1458 Not tainted 6.14.0-rc6-syzkaller-00003-g4d872d51bc9d #0 [ 111.246439][ T7975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 111.246450][ T7975] Call Trace: [ 111.246456][ T7975] [ 111.246531][ T7975] dump_stack_lvl+0xf2/0x150 [ 111.246548][ T7975] dump_stack+0x15/0x1a [ 111.246558][ T7975] should_fail_ex+0x24a/0x260 [ 111.246577][ T7975] should_failslab+0x8f/0xb0 [ 111.246592][ T7975] kmem_cache_alloc_node_noprof+0x59/0x320 [ 111.246721][ T7975] ? __alloc_skb+0x10b/0x310 [ 111.246732][ T7975] ? security_inode_alloc+0x37/0x100 [ 111.246791][ T7975] __alloc_skb+0x10b/0x310 [ 111.246802][ T7975] alloc_skb_with_frags+0x80/0x450 [ 111.246827][ T7975] ? avc_has_perm+0xd4/0x160 [ 111.246838][ T7975] sock_alloc_send_pskb+0x435/0x4f0 [ 111.246854][ T7975] ? lock_sock_nested+0x10f/0x140 [ 111.246879][ T7975] ? avc_has_perm+0xd4/0x160 [ 111.246890][ T7975] j1939_sk_sendmsg+0x4cb/0xc20 [ 111.246915][ T7975] ? __pfx_j1939_sk_sendmsg+0x10/0x10 [ 111.246928][ T7975] __sock_sendmsg+0x140/0x180 [ 111.247019][ T7975] ____sys_sendmsg+0x326/0x4b0 [ 111.247034][ T7975] __sys_sendmsg+0x19d/0x230 [ 111.247088][ T7975] __x64_sys_sendmsg+0x46/0x50 [ 111.247101][ T7975] x64_sys_call+0x2734/0x2dc0 [ 111.247114][ T7975] do_syscall_64+0xc9/0x1c0 [ 111.247130][ T7975] ? clear_bhb_loop+0x55/0xb0 [ 111.247209][ T7975] ? clear_bhb_loop+0x55/0xb0 [ 111.247222][ T7975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.247236][ T7975] RIP: 0033:0x7f809531d169 [ 111.247245][ T7975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.247255][ T7975] RSP: 002b:00007f8093981038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 111.247311][ T7975] RAX: ffffffffffffffda RBX: 00007f8095535fa0 RCX: 00007f809531d169 [ 111.247318][ T7975] RDX: 0000000000048010 RSI: 0000400000000180 RDI: 0000000000000005 [ 111.247330][ T7975] RBP: 00007f8093981090 R08: 0000000000000000 R09: 0000000000000000 [ 111.247336][ T7975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.247342][ T7975] R13: 0000000000000000 R14: 00007f8095535fa0 R15: 00007ffeadd591a8 [ 111.247352][ T7975] [ 111.477894][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.501415][ T7977] loop2: detected capacity change from 0 to 512 [ 111.509277][ T7977] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 111.521180][ T7977] EXT4-fs (loop2): 1 truncate cleaned up [ 111.544302][ T7981] FAULT_INJECTION: forcing a failure. [ 111.544302][ T7981] name failslab, interval 1, probability 0, space 0, times 0 [ 111.556946][ T7981] CPU: 1 UID: 0 PID: 7981 Comm: syz.0.1461 Not tainted 6.14.0-rc6-syzkaller-00003-g4d872d51bc9d #0 [ 111.556966][ T7981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 111.556975][ T7981] Call Trace: [ 111.557014][ T7981] [ 111.557020][ T7981] dump_stack_lvl+0xf2/0x150 [ 111.557042][ T7981] dump_stack+0x15/0x1a [ 111.557059][ T7981] should_fail_ex+0x24a/0x260 [ 111.557088][ T7981] should_failslab+0x8f/0xb0 [ 111.557140][ T7981] __kmalloc_noprof+0xab/0x3f0 [ 111.557159][ T7981] ? scsi_ioctl_reset+0xda/0x4b0 [ 111.557209][ T7981] scsi_ioctl_reset+0xda/0x4b0 [ 111.557283][ T7981] scsi_ioctl+0x7b6/0x1540 [ 111.557304][ T7981] ? scsi_block_when_processing_errors+0x18e/0x1c0 [ 111.557329][ T7981] sg_ioctl+0xd00/0x1870 [ 111.557351][ T7981] ? __fget_files+0x17c/0x1c0 [ 111.557519][ T7981] ? __pfx_sg_ioctl+0x10/0x10 [ 111.557549][ T7981] __se_sys_ioctl+0xc9/0x140 [ 111.557624][ T7981] __x64_sys_ioctl+0x43/0x50 [ 111.557723][ T7981] x64_sys_call+0x1690/0x2dc0 [ 111.557747][ T7981] do_syscall_64+0xc9/0x1c0 [ 111.557771][ T7981] ? clear_bhb_loop+0x55/0xb0 [ 111.557861][ T7981] ? clear_bhb_loop+0x55/0xb0 [ 111.557909][ T7981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.557934][ T7981] RIP: 0033:0x7fed3f76d169 [ 111.557948][ T7981] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.557965][ T7981] RSP: 002b:00007fed3ddd1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 111.557983][ T7981] RAX: ffffffffffffffda RBX: 00007fed3f985fa0 RCX: 00007fed3f76d169 [ 111.557994][ T7981] RDX: 0000400000000080 RSI: 0000000000002284 RDI: 0000000000000004 [ 111.558083][ T7981] RBP: 00007fed3ddd1090 R08: 0000000000000000 R09: 0000000000000000 [ 111.558093][ T7981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.558102][ T7981] R13: 0000000000000000 R14: 00007fed3f985fa0 R15: 00007fff82718138 [ 111.558118][ T7981] [ 111.641618][ T7994] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1465'. [ 111.729180][ T7988] loop5: detected capacity change from 0 to 8192 [ 111.788973][ T7999] loop0: detected capacity change from 0 to 512 [ 111.796018][ T7999] EXT4-fs: Ignoring removed i_version option [ 111.802070][ T7999] EXT4-fs: Ignoring removed mblk_io_submit option [ 111.812048][ T7999] ext4: Unknown parameter 'nouser_xattr' [ 111.818316][ T8002] netlink: 'syz.1.1459': attribute type 4 has an invalid length. [ 111.847799][ T8004] loop0: detected capacity change from 0 to 256 [ 111.859968][ T8004] FAT-fs (loop0): Directory bread(block 64) failed [ 111.868237][ T8005] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1468'. [ 111.877218][ T8004] FAT-fs (loop0): Directory bread(block 65) failed [ 111.877274][ T8004] FAT-fs (loop0): Directory bread(block 66) failed [ 111.877293][ T8004] FAT-fs (loop0): Directory bread(block 67) failed [ 111.877315][ T8004] FAT-fs (loop0): Directory bread(block 68) failed [ 111.886967][ T8005] tipc: Enabling of bearer rejected, already enabled [ 111.897002][ T8004] FAT-fs (loop0): Directory bread(block 69) failed [ 111.913593][ T8007] loop2: detected capacity change from 0 to 512 [ 111.917547][ T8004] FAT-fs (loop0): Directory bread(block 70) failed [ 111.924856][ T8007] EXT4-fs: inline encryption not supported [ 111.930305][ T8004] FAT-fs (loop0): Directory bread(block 71) failed [ 111.942864][ T8004] FAT-fs (loop0): Directory bread(block 72) failed [ 111.945338][ T8007] ext4 filesystem being mounted at /304/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.949483][ T8004] FAT-fs (loop0): Directory bread(block 73) failed [ 111.995437][ T8013] FAULT_INJECTION: forcing a failure. [ 111.995437][ T8013] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 112.008563][ T8013] CPU: 1 UID: 0 PID: 8013 Comm: syz.0.1471 Not tainted 6.14.0-rc6-syzkaller-00003-g4d872d51bc9d #0 [ 112.008647][ T8013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 112.008654][ T8013] Call Trace: [ 112.008657][ T8013] [ 112.008661][ T8013] dump_stack_lvl+0xf2/0x150 [ 112.008703][ T8013] dump_stack+0x15/0x1a [ 112.008714][ T8013] should_fail_ex+0x24a/0x260 [ 112.008730][ T8013] should_fail+0xb/0x10 [ 112.008744][ T8013] should_fail_usercopy+0x1a/0x20 [ 112.008760][ T8013] _copy_from_user+0x1c/0xa0 [ 112.008881][ T8013] memdup_user+0x64/0xc0 [ 112.008895][ T8013] autofs_dev_ioctl+0x15f/0x6d0 [ 112.008907][ T8013] ? __pfx_autofs_dev_ioctl+0x10/0x10 [ 112.008918][ T8013] __se_sys_ioctl+0xc9/0x140 [ 112.008931][ T8013] __x64_sys_ioctl+0x43/0x50 [ 112.008964][ T8013] x64_sys_call+0x1690/0x2dc0 [ 112.008977][ T8013] do_syscall_64+0xc9/0x1c0 [ 112.008996][ T8013] ? clear_bhb_loop+0x55/0xb0 [ 112.009011][ T8013] ? clear_bhb_loop+0x55/0xb0 [ 112.009056][ T8013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.009070][ T8013] RIP: 0033:0x7fed3f76d169 [ 112.009079][ T8013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.009119][ T8013] RSP: 002b:00007fed3ddd1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 112.009189][ T8013] RAX: ffffffffffffffda RBX: 00007fed3f985fa0 RCX: 00007fed3f76d169 [ 112.009196][ T8013] RDX: 0000400000001040 RSI: 00000000c018937e RDI: 0000000000000003 [ 112.009202][ T8013] RBP: 00007fed3ddd1090 R08: 0000000000000000 R09: 0000000000000000 [ 112.009209][ T8013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.009215][ T8013] R13: 0000000000000000 R14: 00007fed3f985fa0 R15: 00007fff82718138 [ 112.009224][ T8013] [ 112.212638][ T8019] SELinux: security_context_str_to_sid () failed with errno=-22 [ 112.226170][ T8018] loop0: detected capacity change from 0 to 512 [ 112.232967][ T8018] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 112.244540][ T8018] EXT4-fs (loop0): 1 truncate cleaned up [ 112.306747][ T8027] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 112.422057][ T8043] loop5: detected capacity change from 0 to 128 [ 112.428548][ T8041] loop0: detected capacity change from 0 to 2048 [ 112.450969][ T8048] loop9: detected capacity change from 0 to 7 [ 112.457368][ T8048] Buffer I/O error on dev loop9, logical block 0, async page read [ 112.465572][ T8048] Buffer I/O error on dev loop9, logical block 0, async page read [ 112.473577][ T8048] loop9: unable to read partition table [ 112.479597][ T8048] loop_reread_partitions: partition scan of loop9 (被xڬdƤݡ [ 112.479597][ T8048] U) failed (rc=-5) [ 112.509976][ T8051] loop5: detected capacity change from 0 to 256 [ 112.521592][ T8051] FAT-fs (loop5): Directory bread(block 64) failed [ 112.528777][ T8051] FAT-fs (loop5): Directory bread(block 65) failed [ 112.535571][ T8051] FAT-fs (loop5): Directory bread(block 66) failed [ 112.542125][ T8051] FAT-fs (loop5): Directory bread(block 67) failed [ 112.548948][ T8051] FAT-fs (loop5): Directory bread(block 68) failed [ 112.555599][ T8051] FAT-fs (loop5): Directory bread(block 69) failed [ 112.562132][ T8051] FAT-fs (loop5): Directory bread(block 70) failed [ 112.568755][ T8051] FAT-fs (loop5): Directory bread(block 71) failed [ 112.575285][ T8051] FAT-fs (loop5): Directory bread(block 72) failed [ 112.581830][ T8051] FAT-fs (loop5): Directory bread(block 73) failed [ 112.622212][ T8055] IPv6: Can't replace route, no match found [ 112.640701][ T8057] SELinux: security_context_str_to_sid () failed with errno=-22 [ 112.677263][ T8059] loop5: detected capacity change from 0 to 512 [ 112.684071][ T8059] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 112.705246][ T8059] EXT4-fs (loop5): 1 truncate cleaned up [ 112.722907][ T8063] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 112.784493][ T8075] loop5: detected capacity change from 0 to 512 [ 112.814618][ T8075] ext4 filesystem being mounted at /126/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 112.877569][ T8081] netlink: 'syz.4.1490': attribute type 4 has an invalid length. [ 113.174101][ T8087] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 113.182890][ T8087] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(6) [ 113.189396][ T8087] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 113.197008][ T8087] vhci_hcd vhci_hcd.0: Device attached [ 113.241177][ T8093] SELinux: security_context_str_to_sid () failed with errno=-22 [ 113.253925][ T8088] vhci_hcd: connection closed [ 113.254132][ T3403] vhci_hcd: stop threads [ 113.263262][ T3403] vhci_hcd: release socket [ 113.267826][ T3403] vhci_hcd: disconnect device [ 113.273509][ T8099] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1496'. [ 113.718370][ T8116] loop5: detected capacity change from 0 to 512 [ 113.725390][ T8116] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 113.737184][ T8116] EXT4-fs (loop5): 1 truncate cleaned up [ 113.801428][ T8126] SELinux: security_context_str_to_sid () failed with errno=-22 [ 113.836676][ T8129] loop2: detected capacity change from 0 to 2048 [ 113.962690][ T8142] netlink: 'syz.5.1511': attribute type 4 has an invalid length. [ 114.119102][ T8146] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1514'. [ 114.195651][ T8148] loop1: detected capacity change from 0 to 512 [ 114.202451][ T8148] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 114.213253][ T8148] EXT4-fs (loop1): 1 truncate cleaned up [ 114.232790][ T8151] SELinux: security_context_str_to_sid () failed with errno=-22 [ 114.252449][ T8153] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1517'. [ 114.261470][ T8153] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1517'. [ 114.287092][ T8155] loop1: detected capacity change from 0 to 2048 [ 114.304447][ T8155] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.1518: bad orphan inode 8192 [ 114.371249][ T8159] FAULT_INJECTION: forcing a failure. [ 114.371249][ T8159] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 114.384355][ T8159] CPU: 0 UID: 0 PID: 8159 Comm: syz.1.1519 Not tainted 6.14.0-rc6-syzkaller-00003-g4d872d51bc9d #0 [ 114.384414][ T8159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 114.384428][ T8159] Call Trace: [ 114.384433][ T8159] [ 114.384438][ T8159] dump_stack_lvl+0xf2/0x150 [ 114.384461][ T8159] dump_stack+0x15/0x1a [ 114.384480][ T8159] should_fail_ex+0x24a/0x260 [ 114.384527][ T8159] should_fail+0xb/0x10 [ 114.384547][ T8159] should_fail_usercopy+0x1a/0x20 [ 114.384625][ T8159] _copy_from_user+0x1c/0xa0 [ 114.384644][ T8159] copy_msghdr_from_user+0x54/0x2a0 [ 114.384675][ T8159] ? __fget_files+0x17c/0x1c0 [ 114.384782][ T8159] __sys_sendmsg+0x13e/0x230 [ 114.384815][ T8159] __x64_sys_sendmsg+0x46/0x50 [ 114.384840][ T8159] x64_sys_call+0x2734/0x2dc0 [ 114.384865][ T8159] do_syscall_64+0xc9/0x1c0 [ 114.384894][ T8159] ? clear_bhb_loop+0x55/0xb0 [ 114.384962][ T8159] ? clear_bhb_loop+0x55/0xb0 [ 114.384988][ T8159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.385112][ T8159] RIP: 0033:0x7fc30bd5d169 [ 114.385126][ T8159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.385142][ T8159] RSP: 002b:00007fc30a3c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 114.385160][ T8159] RAX: ffffffffffffffda RBX: 00007fc30bf75fa0 RCX: 00007fc30bd5d169 [ 114.385172][ T8159] RDX: 0000000000000000 RSI: 0000400000000300 RDI: 0000000000000007 [ 114.385183][ T8159] RBP: 00007fc30a3c7090 R08: 0000000000000000 R09: 0000000000000000 [ 114.385194][ T8159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.385212][ T8159] R13: 0000000000000000 R14: 00007fc30bf75fa0 R15: 00007ffc3a5fb448 [ 114.385294][ T8159] [ 114.621974][ T8166] SELinux: security_context_str_to_sid () failed with errno=-22 [ 114.665652][ T30] kauditd_printk_skb: 515 callbacks suppressed [ 114.665664][ T30] audit: type=1326 audit(1741684782.405:8108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8174 comm="syz.1.1525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc30bd5d169 code=0x7ffc0000 [ 114.696861][ T30] audit: type=1326 audit(1741684782.405:8109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8174 comm="syz.1.1525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc30bd5d169 code=0x7ffc0000 [ 114.720369][ T30] audit: type=1326 audit(1741684782.405:8110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8174 comm="syz.1.1525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc30bd5d169 code=0x7ffc0000 [ 114.743852][ T30] audit: type=1326 audit(1741684782.405:8111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8174 comm="syz.1.1525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc30bd5d169 code=0x7ffc0000 [ 114.767273][ T30] audit: type=1326 audit(1741684782.405:8112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8174 comm="syz.1.1525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc30bd5d169 code=0x7ffc0000 [ 114.791010][ T30] audit: type=1326 audit(1741684782.415:8113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8174 comm="syz.1.1525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc30bd5d169 code=0x7ffc0000 [ 114.814913][ T30] audit: type=1326 audit(1741684782.415:8114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8174 comm="syz.1.1525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc30bd5d169 code=0x7ffc0000 [ 114.838371][ T30] audit: type=1326 audit(1741684782.415:8115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8174 comm="syz.1.1525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc30bd5d169 code=0x7ffc0000 [ 114.861723][ T30] audit: type=1326 audit(1741684782.415:8116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8174 comm="syz.1.1525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc30bd5d169 code=0x7ffc0000 [ 114.885121][ T30] audit: type=1326 audit(1741684782.415:8117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8174 comm="syz.1.1525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc30bd5d169 code=0x7ffc0000 [ 114.931871][ T8186] loop0: detected capacity change from 0 to 512 [ 114.966416][ T8186] EXT4-fs (loop0): orphan cleanup on readonly fs [ 114.976782][ T8186] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1529: bg 0: block 248: padding at end of block bitmap is not set [ 114.993410][ T8195] SELinux: security_context_str_to_sid () failed with errno=-22 [ 115.001775][ T8186] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.1529: Failed to acquire dquot type 1 [ 115.018568][ T8186] EXT4-fs (loop0): 1 truncate cleaned up [ 115.027195][ T8186] EXT4-fs error (device loop0): ext4_lookup:1817: inode #2: comm syz.0.1529: deleted inode referenced: 12 [ 115.052406][ T8202] loop5: detected capacity change from 0 to 2048 [ 115.067807][ T8206] SELinux: security_context_str_to_sid () failed with errno=-22 [ 115.184650][ T8222] netlink: 'syz.0.1538': attribute type 4 has an invalid length. [ 115.859590][ T8229] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 115.921281][ T8237] dvmrp0: entered allmulticast mode [ 115.929788][ T8237] syz_tun: entered allmulticast mode [ 115.935924][ T8236] syz_tun: left allmulticast mode [ 115.944694][ T8241] SELinux: security_context_str_to_sid () failed with errno=-22 [ 115.981236][ T8246] loop5: detected capacity change from 0 to 128 [ 116.086475][ T8258] loop2: detected capacity change from 0 to 2048 [ 116.191422][ T8274] loop0: detected capacity change from 0 to 128 [ 116.199657][ T8274] ext4 filesystem being mounted at /287/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 116.210520][ T8274] EXT4-fs warning (device loop0): ext4_group_extend:1862: can't shrink FS - resize aborted [ 116.242195][ T8278] SELinux: security_context_str_to_sid () failed with errno=-22 [ 116.298014][ T8289] loop0: detected capacity change from 0 to 512 [ 116.305783][ T8289] EXT4-fs (loop0): orphan cleanup on readonly fs [ 116.312898][ T8289] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1569: bg 0: block 248: padding at end of block bitmap is not set [ 116.328646][ T8286] loop5: detected capacity change from 0 to 512 [ 116.329972][ T8289] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.1569: Failed to acquire dquot type 1 [ 116.335410][ T8286] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 116.347873][ T8289] EXT4-fs (loop0): 1 truncate cleaned up [ 116.366927][ T8289] FAULT_INJECTION: forcing a failure. [ 116.366927][ T8289] name failslab, interval 1, probability 0, space 0, times 0 [ 116.379555][ T8289] CPU: 0 UID: 0 PID: 8289 Comm: syz.0.1569 Not tainted 6.14.0-rc6-syzkaller-00003-g4d872d51bc9d #0 [ 116.379581][ T8289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 116.379592][ T8289] Call Trace: [ 116.379597][ T8289] [ 116.379602][ T8289] dump_stack_lvl+0xf2/0x150 [ 116.379626][ T8289] dump_stack+0x15/0x1a [ 116.379641][ T8289] should_fail_ex+0x24a/0x260 [ 116.379704][ T8289] should_failslab+0x8f/0xb0 [ 116.379760][ T8289] kmem_cache_alloc_noprof+0x52/0x320 [ 116.379777][ T8289] ? __es_insert_extent+0x563/0xed0 [ 116.379863][ T8289] __es_insert_extent+0x563/0xed0 [ 116.379916][ T8289] ext4_es_insert_extent+0x45a/0x1c60 [ 116.379944][ T8289] ext4_map_query_blocks+0x107/0x180 [ 116.380026][ T8289] ext4_map_blocks+0x23c/0xd20 [ 116.380045][ T8289] ? xas_load+0x3ae/0x3d0 [ 116.380072][ T8289] ext4_getblk+0x11f/0x530 [ 116.380094][ T8289] ext4_bread_batch+0x5b/0x360 [ 116.380173][ T8289] __ext4_find_entry+0x822/0xef0 [ 116.380193][ T8289] ? __d_lookup_rcu+0x25b/0x2a0 [ 116.380214][ T8289] ? d_alloc_parallel+0xbe4/0xc80 [ 116.380241][ T8289] ext4_lookup+0xba/0x390 [ 116.380259][ T8289] ? __pfx_ext4_lookup+0x10/0x10 [ 116.380275][ T8289] path_openat+0xd51/0x1fc0 [ 116.380353][ T8289] do_filp_open+0x107/0x230 [ 116.380378][ T8289] do_open_execat+0xd0/0x280 [ 116.380398][ T8289] open_exec+0x3d/0x60 [ 116.380415][ T8289] bm_register_write+0x86f/0xb60 [ 116.380440][ T8289] ? __pfx_bm_register_write+0x10/0x10 [ 116.380592][ T8289] vfs_write+0x27d/0x920 [ 116.380611][ T8289] ? putname+0xcf/0xf0 [ 116.380624][ T8289] ? __fget_files+0x17c/0x1c0 [ 116.380663][ T8289] ksys_write+0xe8/0x1b0 [ 116.380758][ T8289] __x64_sys_write+0x42/0x50 [ 116.380777][ T8289] x64_sys_call+0x287e/0x2dc0 [ 116.380853][ T8289] do_syscall_64+0xc9/0x1c0 [ 116.380875][ T8289] ? clear_bhb_loop+0x55/0xb0 [ 116.380895][ T8289] ? clear_bhb_loop+0x55/0xb0 [ 116.380953][ T8289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.380973][ T8289] RIP: 0033:0x7fed3f76d169 [ 116.380985][ T8289] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.381002][ T8289] RSP: 002b:00007fed3ddd1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 116.381017][ T8289] RAX: ffffffffffffffda RBX: 00007fed3f985fa0 RCX: 00007fed3f76d169 [ 116.381026][ T8289] RDX: 0000000000000032 RSI: 0000400000000440 RDI: 0000000000000004 [ 116.381036][ T8289] RBP: 00007fed3ddd1090 R08: 0000000000000000 R09: 0000000000000000 [ 116.381045][ T8289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.381054][ T8289] R13: 0000000000000000 R14: 00007fed3f985fa0 R15: 00007fff82718138 [ 116.381086][ T8289] [ 116.381665][ T8289] EXT4-fs error (device loop0): ext4_lookup:1817: inode #2: comm syz.0.1569: deleted inode referenced: 12 [ 116.392964][ T8286] EXT4-fs (loop5): 1 truncate cleaned up [ 116.701464][ T8300] __nla_validate_parse: 1 callbacks suppressed [ 116.701533][ T8300] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 116.736216][ T8300] bridge0: port 3(batadv1) entered blocking state [ 116.742683][ T8300] bridge0: port 3(batadv1) entered disabled state [ 116.751315][ T8306] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1576'. [ 116.760533][ T8300] batadv1: entered allmulticast mode [ 116.766610][ T8300] batadv1: entered promiscuous mode [ 116.778426][ T8300] netlink: 87 bytes leftover after parsing attributes in process `+}[@'. [ 116.809601][ T8311] SELinux: security_context_str_to_sid () failed with errno=-22 [ 116.877184][ T8326] loop5: detected capacity change from 0 to 256 [ 116.892142][ T8326] FAT-fs (loop5): Directory bread(block 64) failed [ 116.899150][ T8326] FAT-fs (loop5): Directory bread(block 65) failed [ 116.907076][ T8326] FAT-fs (loop5): Directory bread(block 66) failed [ 116.915468][ T8326] FAT-fs (loop5): Directory bread(block 67) failed [ 116.922048][ T8326] FAT-fs (loop5): Directory bread(block 68) failed [ 116.929659][ T8326] FAT-fs (loop5): Directory bread(block 69) failed [ 116.937338][ T8326] FAT-fs (loop5): Directory bread(block 70) failed [ 116.944959][ T8326] FAT-fs (loop5): Directory bread(block 71) failed [ 116.952847][ T8326] FAT-fs (loop5): Directory bread(block 72) failed [ 116.959782][ T8326] FAT-fs (loop5): Directory bread(block 73) failed [ 116.986642][ T8336] loop1: detected capacity change from 0 to 512 [ 117.026997][ T8336] ext4 filesystem being mounted at /295/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.047077][ T8346] FAULT_INJECTION: forcing a failure. [ 117.047077][ T8346] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 117.060152][ T8346] CPU: 1 UID: 0 PID: 8346 Comm: syz.2.1590 Not tainted 6.14.0-rc6-syzkaller-00003-g4d872d51bc9d #0 [ 117.060175][ T8346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 117.060185][ T8346] Call Trace: [ 117.060190][ T8346] [ 117.060197][ T8346] dump_stack_lvl+0xf2/0x150 [ 117.060222][ T8346] dump_stack+0x15/0x1a [ 117.060240][ T8346] should_fail_ex+0x24a/0x260 [ 117.060337][ T8346] should_fail+0xb/0x10 [ 117.060361][ T8346] should_fail_usercopy+0x1a/0x20 [ 117.060388][ T8346] copy_to_user_nofault+0x7d/0x110 [ 117.060479][ T8346] bpf_probe_write_user+0x80/0xc0 [ 117.060510][ T8346] bpf_prog_47333e4d9aed2554+0x5c/0x64 [ 117.060577][ T8346] bpf_trace_run2+0x104/0x1d0 [ 117.060600][ T8346] ? ioctl_has_perm+0x28d/0x2e0 [ 117.060626][ T8346] free_frozen_pages+0x3e3/0x520 [ 117.060650][ T8346] ? do_vfs_ioctl+0x98b/0x1590 [ 117.060705][ T8346] sg_ioctl+0x17df/0x1870 [ 117.060744][ T8346] ? __fget_files+0x17c/0x1c0 [ 117.060773][ T8346] ? __pfx_sg_ioctl+0x10/0x10 [ 117.060825][ T8346] __se_sys_ioctl+0xc9/0x140 [ 117.060848][ T8346] __x64_sys_ioctl+0x43/0x50 [ 117.060897][ T8346] x64_sys_call+0x1690/0x2dc0 [ 117.060929][ T8346] do_syscall_64+0xc9/0x1c0 [ 117.060956][ T8346] ? clear_bhb_loop+0x55/0xb0 [ 117.061003][ T8346] ? clear_bhb_loop+0x55/0xb0 [ 117.061026][ T8346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.061050][ T8346] RIP: 0033:0x7f809531d169 [ 117.061063][ T8346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.061080][ T8346] RSP: 002b:00007f8093981038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 117.061166][ T8346] RAX: ffffffffffffffda RBX: 00007f8095535fa0 RCX: 00007f809531d169 [ 117.061180][ T8346] RDX: 0000400000000200 RSI: 0000000000002275 RDI: 0000000000000004 [ 117.061192][ T8346] RBP: 00007f8093981090 R08: 0000000000000000 R09: 0000000000000000 [ 117.061204][ T8346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.061215][ T8346] R13: 0000000000000000 R14: 00007f8095535fa0 R15: 00007ffeadd591a8 [ 117.061231][ T8346] [ 117.061987][ T8323] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 117.280446][ T12] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 117.289682][ T12] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 117.301700][ T8336] SET target dimension over the limit! [ 117.321533][ T12] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 117.346328][ T12] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 5 with error 28 [ 117.358642][ T12] EXT4-fs (loop1): This should not happen!! Data will be lost [ 117.358642][ T12] [ 117.361379][ T8357] SELinux: security_context_str_to_sid () failed with errno=-22 [ 117.368274][ T12] EXT4-fs (loop1): Total free blocks count 0 [ 117.368287][ T12] EXT4-fs (loop1): Free/Dirty block details [ 117.388006][ T12] EXT4-fs (loop1): free_blocks=65280 [ 117.393349][ T12] EXT4-fs (loop1): dirty_blocks=5 [ 117.398410][ T12] EXT4-fs (loop1): Block reservation details [ 117.404459][ T12] EXT4-fs (loop1): i_reserved_data_blocks=5 [ 117.419368][ T8360] loop2: detected capacity change from 0 to 2048 [ 117.681926][ T8390] loop5: detected capacity change from 0 to 1024 [ 117.699157][ T8390] ext4 filesystem being mounted at /150/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.717272][ T8396] xt_CT: You must specify a L4 protocol and not use inversions on it [ 118.122687][ T8425] serio: Serial port ptm1 [ 118.215948][ T8430] loop2: detected capacity change from 0 to 512 [ 118.222386][ T8429] loop0: detected capacity change from 0 to 2048 [ 118.235113][ T8430] ext4 filesystem being mounted at /328/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 118.264853][ T8429] EXT4-fs error (device loop0): ext4_orphan_get:1415: comm syz.0.1619: bad orphan inode 8192 [ 118.447191][ T8449] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 118.565593][ T8463] loop5: detected capacity change from 0 to 512 [ 118.572244][ T8462] loop1: detected capacity change from 0 to 2048 [ 118.582350][ T8463] EXT4-fs (loop5): orphan cleanup on readonly fs [ 118.591373][ T8463] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1627: bg 0: block 248: padding at end of block bitmap is not set [ 118.614905][ T8463] EXT4-fs error (device loop5): ext4_acquire_dquot:6927: comm syz.5.1627: Failed to acquire dquot type 1 [ 118.638047][ T8465] loop0: detected capacity change from 0 to 8192 [ 118.645021][ T8463] EXT4-fs (loop5): 1 truncate cleaned up [ 118.660537][ T8456] EXT4-fs error (device loop5): ext4_lookup:1817: inode #2: comm syz.5.1627: deleted inode referenced: 12 [ 118.705841][ T8469] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1629'. [ 119.008640][ T8483] SELinux: security_context_str_to_sid () failed with errno=-22 [ 119.046019][ T8489] loop2: detected capacity change from 0 to 2048 [ 119.075887][ T8489] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.1638: bad orphan inode 8192 [ 119.103076][ T8491] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 119.248850][ T8512] SELinux: security_context_str_to_sid () failed with errno=-22 [ 119.270161][ T8514] SELinux: security_context_str_to_sid () failed with errno=-22 [ 119.298054][ T8516] SELinux: security_context_str_to_sid () failed with errno=-22 [ 119.338691][ T8520] loop0: detected capacity change from 0 to 2048 [ 119.356948][ T8520] EXT4-fs error (device loop0): ext4_orphan_get:1415: comm syz.0.1651: bad orphan inode 8192 [ 119.424394][ T8522] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 119.477939][ T8534] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 119.486177][ T8534] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 119.501936][ T8542] SELinux: security_context_str_to_sid () failed with errno=-22 [ 119.575131][ T8551] SELinux: security_context_str_to_sid () failed with errno=-22 [ 119.592939][ T8552] loop2: detected capacity change from 0 to 2048 [ 119.627918][ T8561] loop1: detected capacity change from 0 to 256 [ 119.640088][ T8561] FAT-fs (loop1): Directory bread(block 64) failed [ 119.646670][ T8561] FAT-fs (loop1): Directory bread(block 65) failed [ 119.653417][ T8561] FAT-fs (loop1): Directory bread(block 66) failed [ 119.659959][ T8561] FAT-fs (loop1): Directory bread(block 67) failed [ 119.666662][ T8561] FAT-fs (loop1): Directory bread(block 68) failed [ 119.674238][ T8561] FAT-fs (loop1): Directory bread(block 69) failed [ 119.683219][ T8561] FAT-fs (loop1): Directory bread(block 70) failed [ 119.693463][ T8563] loop5: detected capacity change from 0 to 512 [ 119.694045][ T8561] FAT-fs (loop1): Directory bread(block 71) failed [ 119.706463][ T8561] FAT-fs (loop1): Directory bread(block 72) failed [ 119.713095][ T8561] FAT-fs (loop1): Directory bread(block 73) failed [ 119.713753][ T8563] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -13 [ 119.729358][ T8563] EXT4-fs warning (device loop5): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 119.740579][ T8563] EXT4-fs warning (device loop5): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 119.751123][ T8563] EXT4-fs (loop5): 1 truncate cleaned up [ 119.760271][ T8563] EXT4-fs warning (device loop5): ext4_lookup:1825: Inconsistent encryption contexts: 2/12 [ 119.781115][ T8566] loop1: detected capacity change from 0 to 2048 [ 119.795292][ T8566] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.1667: bad orphan inode 8192 [ 119.808565][ T30] kauditd_printk_skb: 376 callbacks suppressed [ 119.808638][ T30] audit: type=1400 audit(1741684787.545:8488): avc: denied { ioctl } for pid=8567 comm="syz.5.1668" path="socket:[19491]" dev="sockfs" ino=19491 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 119.873483][ T8572] loop1: detected capacity change from 0 to 2048 [ 119.952495][ T8580] SELinux: security_context_str_to_sid () failed with errno=-22 [ 119.967257][ T8577] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 119.983166][ T30] audit: type=1400 audit(1741684787.715:8489): avc: denied { create } for pid=8581 comm="syz.5.1672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 120.007396][ T30] audit: type=1400 audit(1741684787.745:8490): avc: denied { write } for pid=8581 comm="syz.5.1672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 120.056792][ T8584] ALSA: seq fatal error: cannot create timer (-19) [ 120.058005][ T30] audit: type=1400 audit(1741684787.795:8491): avc: denied { setattr } for pid=8581 comm="syz.5.1672" name="NETLINK" dev="sockfs" ino=19518 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 120.204463][ T8592] SELinux: security_context_str_to_sid () failed with errno=-22 [ 120.274493][ T8595] SELinux: failed to load policy [ 120.330580][ T8604] netlink: 'syz.1.1676': attribute type 4 has an invalid length. [ 120.337995][ T8601] FAULT_INJECTION: forcing a failure. [ 120.337995][ T8601] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 120.351372][ T8601] CPU: 0 UID: 0 PID: 8601 Comm: syz.0.1679 Not tainted 6.14.0-rc6-syzkaller-00003-g4d872d51bc9d #0 [ 120.351394][ T8601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 120.351405][ T8601] Call Trace: [ 120.351410][ T8601] [ 120.351416][ T8601] dump_stack_lvl+0xf2/0x150 [ 120.351439][ T8601] dump_stack+0x15/0x1a [ 120.351503][ T8601] should_fail_ex+0x24a/0x260 [ 120.351575][ T8601] should_fail+0xb/0x10 [ 120.351595][ T8601] should_fail_usercopy+0x1a/0x20 [ 120.351620][ T8601] fpu__restore_sig+0x11d/0xb00 [ 120.351715][ T8601] ? copy_fpstate_to_sigframe+0x6e6/0x7e0 [ 120.351739][ T8601] restore_sigcontext+0x1b5/0x220 [ 120.351824][ T8601] __do_sys_rt_sigreturn+0xfd/0x160 [ 120.351844][ T8601] x64_sys_call+0x2982/0x2dc0 [ 120.351867][ T8601] do_syscall_64+0xc9/0x1c0 [ 120.351932][ T8601] ? clear_bhb_loop+0x55/0xb0 [ 120.351954][ T8601] ? clear_bhb_loop+0x55/0xb0 [ 120.351974][ T8601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.351994][ T8601] RIP: 0033:0x7fed3f76d167 [ 120.352006][ T8601] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 120.352028][ T8601] RSP: 002b:00007fed3ddd1038 EFLAGS: 00000246 [ 120.352043][ T8601] RAX: 000000000000002a RBX: 00007fed3f985fa0 RCX: 00007fed3f76d169 [ 120.352055][ T8601] RDX: 000000000000006e RSI: 0000400000000280 RDI: 0000000000000004 [ 120.352065][ T8601] RBP: 00007fed3ddd1090 R08: 0000000000000000 R09: 0000000000000000 [ 120.352077][ T8601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 120.352087][ T8601] R13: 0000000000000000 R14: 00007fed3f985fa0 R15: 00007fff82718138 [ 120.352150][ T8601] [ 120.551833][ T8606] loop2: detected capacity change from 0 to 128 [ 120.562074][ T8608] SELinux: security_context_str_to_sid () failed with errno=-22 [ 120.617552][ T30] audit: type=1326 audit(1741684788.355:8492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8612 comm="syz.0.1684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3f76d169 code=0x7ffc0000 [ 120.647592][ T8610] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 120.656213][ T30] audit: type=1326 audit(1741684788.355:8493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8612 comm="syz.0.1684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3f76d169 code=0x7ffc0000 [ 120.679692][ T30] audit: type=1326 audit(1741684788.365:8494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8612 comm="syz.0.1684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed3f76d169 code=0x7ffc0000 [ 120.703103][ T30] audit: type=1326 audit(1741684788.365:8495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8612 comm="syz.0.1684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3f76d169 code=0x7ffc0000 [ 120.726532][ T30] audit: type=1326 audit(1741684788.375:8496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8612 comm="syz.0.1684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3f76d169 code=0x7ffc0000 [ 120.749917][ T30] audit: type=1326 audit(1741684788.375:8497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8612 comm="syz.0.1684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed3f76d169 code=0x7ffc0000 [ 120.863706][ T8627] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1690'. [ 120.907645][ T8633] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1692'. [ 120.917158][ T8633] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1692'. [ 120.938600][ T8635] loop2: detected capacity change from 0 to 2048 [ 120.978872][ T8637] loop5: detected capacity change from 0 to 8192 [ 121.068187][ T8641] SELinux: security_context_str_to_sid () failed with errno=-22 [ 121.331583][ T8652] loop1: detected capacity change from 0 to 512 [ 121.344900][ T8652] ext4 filesystem being mounted at /320/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 121.654784][ T8656] loop0: detected capacity change from 0 to 128 [ 121.678819][ T8656] syz.0.1699: attempt to access beyond end of device [ 121.678819][ T8656] loop0: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 121.699398][ T8656] syz.0.1699: attempt to access beyond end of device [ 121.699398][ T8656] loop0: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 121.780725][ T8662] SELinux: security_context_str_to_sid () failed with errno=-22 [ 121.823454][ T8669] loop0: detected capacity change from 0 to 1024 [ 121.840036][ T8671] loop5: detected capacity change from 0 to 2048 [ 121.840853][ T8674] SELinux: security_context_str_to_sid () failed with errno=-22 [ 121.881084][ T8671] EXT4-fs error (device loop5): ext4_orphan_get:1415: comm syz.5.1704: bad orphan inode 8192 [ 121.924758][ T8669] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 122.116823][ T8693] loop2: detected capacity change from 0 to 2048 [ 122.854210][ T8726] loop5: detected capacity change from 0 to 256 [ 122.867570][ T8726] FAT-fs (loop5): Directory bread(block 64) failed [ 122.876821][ T8726] FAT-fs (loop5): Directory bread(block 65) failed [ 122.885081][ T8726] FAT-fs (loop5): Directory bread(block 66) failed [ 122.891652][ T8726] FAT-fs (loop5): Directory bread(block 67) failed [ 122.898635][ T8726] FAT-fs (loop5): Directory bread(block 68) failed [ 122.907004][ T8726] FAT-fs (loop5): Directory bread(block 69) failed [ 122.914153][ T8726] FAT-fs (loop5): Directory bread(block 70) failed [ 122.920752][ T8726] FAT-fs (loop5): Directory bread(block 71) failed [ 122.928466][ T8726] FAT-fs (loop5): Directory bread(block 72) failed [ 122.935209][ T8726] FAT-fs (loop5): Directory bread(block 73) failed [ 123.053198][ T8732] 9pnet: Could not find request transport: t [ 123.261591][ T8753] SELinux: security_context_str_to_sid () failed with errno=-22 [ 123.422040][ T8767] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 123.620566][ T8773] loop5: detected capacity change from 0 to 512 [ 123.638208][ T8773] ext4 filesystem being mounted at /177/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 124.268366][ T8789] SELinux: security_context_str_to_sid () failed with errno=-22 [ 124.295476][ T8792] loop0: detected capacity change from 0 to 256 [ 124.331478][ T8792] FAT-fs (loop0): Directory bread(block 64) failed [ 124.343246][ T8792] FAT-fs (loop0): Directory bread(block 65) failed [ 124.349881][ T8792] FAT-fs (loop0): Directory bread(block 66) failed [ 124.360386][ T8792] FAT-fs (loop0): Directory bread(block 67) failed [ 124.367264][ T8792] FAT-fs (loop0): Directory bread(block 68) failed [ 124.375293][ T8792] FAT-fs (loop0): Directory bread(block 69) failed [ 124.381904][ T8792] FAT-fs (loop0): Directory bread(block 70) failed [ 124.388537][ T8792] FAT-fs (loop0): Directory bread(block 71) failed [ 124.396222][ T8792] FAT-fs (loop0): Directory bread(block 72) failed [ 124.402762][ T8792] FAT-fs (loop0): Directory bread(block 73) failed [ 124.563822][ T8813] loop1: detected capacity change from 0 to 8192 [ 124.591983][ T8819] loop2: detected capacity change from 0 to 256 [ 124.631289][ T8819] FAT-fs (loop2): Directory bread(block 64) failed [ 124.638170][ T8819] FAT-fs (loop2): Directory bread(block 65) failed [ 124.650581][ T8819] FAT-fs (loop2): Directory bread(block 66) failed [ 124.657264][ T8819] FAT-fs (loop2): Directory bread(block 67) failed [ 124.663908][ T8819] FAT-fs (loop2): Directory bread(block 68) failed [ 124.670436][ T8819] FAT-fs (loop2): Directory bread(block 69) failed [ 124.677022][ T8819] FAT-fs (loop2): Directory bread(block 70) failed [ 124.683659][ T8819] FAT-fs (loop2): Directory bread(block 71) failed [ 124.690386][ T8819] FAT-fs (loop2): Directory bread(block 72) failed [ 124.696913][ T8819] FAT-fs (loop2): Directory bread(block 73) failed [ 124.792182][ T8829] loop5: detected capacity change from 0 to 512 [ 124.833404][ T8829] ext4 filesystem being mounted at /181/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 124.840054][ T8833] loop2: detected capacity change from 0 to 128 [ 124.928927][ T8839] syz.2.1763: attempt to access beyond end of device [ 124.928927][ T8839] loop2: rw=34817, sector=97, nr_sectors = 32 limit=128 [ 125.201966][ T8852] loop2: detected capacity change from 0 to 512 [ 125.335375][ T8852] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 125.366459][ T8852] EXT4-fs mount: 71 callbacks suppressed [ 125.366473][ T8852] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.390995][ T8849] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 125.439909][ T8852] ext4 filesystem being mounted at /360/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.470281][ T8859] netlink: 'syz.4.1770': attribute type 1 has an invalid length. [ 125.480380][ T8852] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 125.574494][ T6196] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.620957][ T8864] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1772'. [ 125.630306][ T8864] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1772'. [ 125.676138][ T8869] loop5: detected capacity change from 0 to 256 [ 125.690929][ T8869] FAT-fs (loop5): Directory bread(block 64) failed [ 125.709377][ T8869] FAT-fs (loop5): Directory bread(block 65) failed [ 125.727636][ T8869] FAT-fs (loop5): Directory bread(block 66) failed [ 125.734371][ T8869] FAT-fs (loop5): Directory bread(block 67) failed [ 125.740946][ T8869] FAT-fs (loop5): Directory bread(block 68) failed [ 125.758235][ T8875] futex_wake_op: syz.4.1775 tries to shift op by 144; fix this program [ 125.768862][ T8869] FAT-fs (loop5): Directory bread(block 69) failed [ 125.790719][ T8852] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 9 with max blocks 2048 with error 28 [ 125.801223][ T8869] FAT-fs (loop5): Directory bread(block 70) failed [ 125.803166][ T8852] EXT4-fs (loop2): This should not happen!! Data will be lost [ 125.803166][ T8852] [ 125.819299][ T8852] EXT4-fs (loop2): Total free blocks count 0 [ 125.820397][ T8869] FAT-fs (loop5): Directory bread(block 71) failed [ 125.825288][ T8852] EXT4-fs (loop2): Free/Dirty block details [ 125.825302][ T8852] EXT4-fs (loop2): free_blocks=39627 [ 125.831917][ T8869] FAT-fs (loop5): Directory bread(block 72) failed [ 125.837678][ T8852] EXT4-fs (loop2): dirty_blocks=4096 [ 125.843894][ T8869] FAT-fs (loop5): Directory bread(block 73) failed [ 125.849417][ T8852] EXT4-fs (loop2): Block reservation details [ 125.867302][ T8852] EXT4-fs (loop2): i_reserved_data_blocks=4096 [ 125.876039][ T8867] loop1: detected capacity change from 0 to 8192 [ 125.953427][ T30] kauditd_printk_skb: 283 callbacks suppressed [ 125.953442][ T30] audit: type=1326 audit(1741684793.685:8781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8883 comm="syz.4.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3e1efd169 code=0x7ffc0000 [ 125.983041][ T30] audit: type=1326 audit(1741684793.685:8782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8883 comm="syz.4.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3e1efd169 code=0x7ffc0000 [ 125.989898][ T8862] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 2058 with max blocks 2047 with error 28 [ 126.006539][ T30] audit: type=1326 audit(1741684793.685:8783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8883 comm="syz.4.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc3e1efd169 code=0x7ffc0000 [ 126.042588][ T30] audit: type=1326 audit(1741684793.685:8784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8883 comm="syz.4.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3e1efd169 code=0x7ffc0000 [ 126.066009][ T30] audit: type=1326 audit(1741684793.685:8785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8883 comm="syz.4.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3e1efd169 code=0x7ffc0000 [ 126.089396][ T30] audit: type=1326 audit(1741684793.685:8786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8883 comm="syz.4.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc3e1efd169 code=0x7ffc0000 [ 126.112793][ T30] audit: type=1326 audit(1741684793.695:8787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8883 comm="syz.4.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3e1efd169 code=0x7ffc0000 [ 126.136192][ T30] audit: type=1326 audit(1741684793.695:8788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8883 comm="syz.4.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3e1efd169 code=0x7ffc0000 [ 126.202292][ T30] audit: type=1326 audit(1741684793.785:8789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8883 comm="syz.4.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc3e1efd169 code=0x7ffc0000 [ 126.225632][ T30] audit: type=1326 audit(1741684793.785:8790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8883 comm="syz.4.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3e1efd169 code=0x7ffc0000 [ 126.341069][ T8889] loop5: detected capacity change from 0 to 8192 [ 126.433350][ T8898] FAULT_INJECTION: forcing a failure. [ 126.433350][ T8898] name failslab, interval 1, probability 0, space 0, times 0 [ 126.445995][ T8898] CPU: 1 UID: 0 PID: 8898 Comm: syz.2.1783 Not tainted 6.14.0-rc6-syzkaller-00003-g4d872d51bc9d #0 [ 126.446020][ T8898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 126.446030][ T8898] Call Trace: [ 126.446035][ T8898] [ 126.446041][ T8898] dump_stack_lvl+0xf2/0x150 [ 126.446169][ T8898] dump_stack+0x15/0x1a [ 126.446193][ T8898] should_fail_ex+0x24a/0x260 [ 126.446218][ T8898] should_failslab+0x8f/0xb0 [ 126.446242][ T8898] kmem_cache_alloc_noprof+0x52/0x320 [ 126.446274][ T8898] ? security_file_alloc+0x32/0x100 [ 126.446302][ T8898] security_file_alloc+0x32/0x100 [ 126.446340][ T8898] init_file+0x5d/0x1b0 [ 126.446371][ T8898] alloc_empty_file+0xea/0x200 [ 126.446413][ T8898] path_openat+0x6a/0x1fc0 [ 126.446441][ T8898] do_filp_open+0x107/0x230 [ 126.446481][ T8898] do_sys_openat2+0xab/0x120 [ 126.446501][ T8898] __x64_sys_openat+0xf3/0x120 [ 126.446519][ T8898] x64_sys_call+0x2b30/0x2dc0 [ 126.446620][ T8898] do_syscall_64+0xc9/0x1c0 [ 126.446650][ T8898] ? clear_bhb_loop+0x55/0xb0 [ 126.446672][ T8898] ? clear_bhb_loop+0x55/0xb0 [ 126.446692][ T8898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.446714][ T8898] RIP: 0033:0x7f809531bad0 [ 126.446729][ T8898] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 126.446771][ T8898] RSP: 002b:00007f8093980f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 126.446866][ T8898] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f809531bad0 [ 126.446877][ T8898] RDX: 0000000000000000 RSI: 00007f8093980fa0 RDI: 00000000ffffff9c [ 126.446887][ T8898] RBP: 00007f8093980fa0 R08: 0000000000000000 R09: 0000000000000000 [ 126.446896][ T8898] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 126.446906][ T8898] R13: 0000000000000000 R14: 00007f8095535fa0 R15: 00007ffeadd591a8 [ 126.446920][ T8898] [ 126.695426][ T8904] blktrace: Concurrent blktraces are not allowed on loop3 [ 126.727108][ T8906] loop2: detected capacity change from 0 to 512 [ 126.746832][ T8906] EXT4-fs: Ignoring removed oldalloc option [ 126.767378][ T8906] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.1787: Parent and EA inode have the same ino 15 [ 126.785117][ T8906] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.1787: Parent and EA inode have the same ino 15 [ 126.799106][ T8906] EXT4-fs (loop2): 1 orphan inode deleted [ 126.807255][ T8910] loop1: detected capacity change from 0 to 256 [ 126.824289][ T8906] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.842780][ T8910] FAT-fs (loop1): Directory bread(block 64) failed [ 126.865350][ T8910] FAT-fs (loop1): Directory bread(block 65) failed [ 126.887248][ T8910] FAT-fs (loop1): Directory bread(block 66) failed [ 126.898779][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.913532][ T8910] FAT-fs (loop1): Directory bread(block 67) failed [ 126.930169][ T8910] FAT-fs (loop1): Directory bread(block 68) failed [ 126.943209][ T8910] FAT-fs (loop1): Directory bread(block 69) failed [ 126.949764][ T8910] FAT-fs (loop1): Directory bread(block 70) failed [ 126.957794][ T8910] FAT-fs (loop1): Directory bread(block 71) failed [ 126.964407][ T8910] FAT-fs (loop1): Directory bread(block 72) failed [ 126.971022][ T8910] FAT-fs (loop1): Directory bread(block 73) failed [ 127.070819][ T8921] loop9: detected capacity change from 0 to 7 [ 127.078720][ T8921] Buffer I/O error on dev loop9, logical block 0, async page read [ 127.086693][ T8921] Buffer I/O error on dev loop9, logical block 0, async page read [ 127.094593][ T8921] loop9: unable to read partition table [ 127.114943][ T8921] loop_reread_partitions: partition scan of loop9 (被xڬdƤݡ [ 127.114943][ T8921] U) failed (rc=-5) [ 127.202729][ T8918] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.276000][ T8923] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 127.326873][ T8918] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.501217][ T8918] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.525686][ T8940] loop0: detected capacity change from 0 to 8192 [ 127.586908][ T8918] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.600144][ T8944] loop2: detected capacity change from 0 to 8192 [ 127.642149][ T8918] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.666521][ T8918] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.679891][ T8918] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.694598][ T8918] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.745887][ T8955] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1807'. [ 127.826146][ T8959] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 127.835640][ T8967] SELinux: failed to load policy [ 127.891585][ T8974] netlink: 'syz.0.1809': attribute type 4 has an invalid length. [ 127.911437][ T8976] FAULT_INJECTION: forcing a failure. [ 127.911437][ T8976] name failslab, interval 1, probability 0, space 0, times 0 [ 127.924107][ T8976] CPU: 0 UID: 0 PID: 8976 Comm: syz.1.1815 Not tainted 6.14.0-rc6-syzkaller-00003-g4d872d51bc9d #0 [ 127.924150][ T8976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 127.924160][ T8976] Call Trace: [ 127.924164][ T8976] [ 127.924170][ T8976] dump_stack_lvl+0xf2/0x150 [ 127.924192][ T8976] dump_stack+0x15/0x1a [ 127.924228][ T8976] should_fail_ex+0x24a/0x260 [ 127.924256][ T8976] should_failslab+0x8f/0xb0 [ 127.924356][ T8976] __kmalloc_noprof+0xab/0x3f0 [ 127.924430][ T8976] ? tcf_em_tree_validate+0x132/0x8f0 [ 127.924448][ T8976] tcf_em_tree_validate+0x132/0x8f0 [ 127.924464][ T8976] ? flow_change+0x1c6/0xc90 [ 127.924491][ T8976] ? should_fail_ex+0xd7/0x260 [ 127.924566][ T8976] ? __kmalloc_cache_noprof+0x186/0x320 [ 127.924578][ T8976] flow_change+0x1f0/0xc90 [ 127.924658][ T8976] tc_new_tfilter+0xe8b/0x1110 [ 127.924681][ T8976] ? __pfx_tc_new_tfilter+0x10/0x10 [ 127.924737][ T8976] rtnetlink_rcv_msg+0x651/0x710 [ 127.924751][ T8976] ? ref_tracker_free+0x3a5/0x410 [ 127.924767][ T8976] netlink_rcv_skb+0x12c/0x230 [ 127.924787][ T8976] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 127.924804][ T8976] rtnetlink_rcv+0x1c/0x30 [ 127.924818][ T8976] netlink_unicast+0x599/0x670 [ 127.924834][ T8976] netlink_sendmsg+0x5cc/0x6e0 [ 127.924853][ T8976] ? __pfx_netlink_sendmsg+0x10/0x10 [ 127.924869][ T8976] __sock_sendmsg+0x140/0x180 [ 127.925010][ T8976] ____sys_sendmsg+0x326/0x4b0 [ 127.925034][ T8976] __sys_sendmsg+0x19d/0x230 [ 127.925054][ T8976] __x64_sys_sendmsg+0x46/0x50 [ 127.925160][ T8976] x64_sys_call+0x2734/0x2dc0 [ 127.925248][ T8976] do_syscall_64+0xc9/0x1c0 [ 127.925263][ T8976] ? clear_bhb_loop+0x55/0xb0 [ 127.925277][ T8976] ? clear_bhb_loop+0x55/0xb0 [ 127.925290][ T8976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.925415][ T8976] RIP: 0033:0x7fc30bd5d169 [ 127.925424][ T8976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.925434][ T8976] RSP: 002b:00007fc30a3c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 127.925444][ T8976] RAX: ffffffffffffffda RBX: 00007fc30bf75fa0 RCX: 00007fc30bd5d169 [ 127.925451][ T8976] RDX: 0000000000000800 RSI: 00004000000001c0 RDI: 0000000000000006 [ 127.925457][ T8976] RBP: 00007fc30a3c7090 R08: 0000000000000000 R09: 0000000000000000 [ 127.925464][ T8976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 127.925504][ T8976] R13: 0000000000000000 R14: 00007fc30bf75fa0 R15: 00007ffc3a5fb448 [ 127.925513][ T8976] [ 128.188357][ T8979] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1816'. [ 128.197759][ T8979] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1816'. [ 128.225064][ T8981] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1817'. [ 128.235085][ T8981] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1817'. [ 128.238739][ T8983] SELinux: security_context_str_to_sid () failed with errno=-22 [ 128.284720][ T8989] loop1: detected capacity change from 0 to 512 [ 128.292278][ T8989] EXT4-fs (loop1): orphan cleanup on readonly fs [ 128.299411][ T8989] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1821: bg 0: block 248: padding at end of block bitmap is not set [ 128.314114][ T8989] EXT4-fs error (device loop1): ext4_acquire_dquot:6927: comm syz.1.1821: Failed to acquire dquot type 1 [ 128.327720][ T8991] tipc: Enabling of bearer rejected, already enabled [ 128.328222][ T8989] EXT4-fs (loop1): 1 truncate cleaned up [ 128.341735][ T8989] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 128.363131][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.380355][ T8993] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1822'. [ 128.389582][ T8993] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1822'. [ 128.424378][ T8997] loop2: detected capacity change from 0 to 1024 [ 128.431128][ T8997] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 128.442143][ T8997] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 128.452656][ T8997] JBD2: no valid journal superblock found [ 128.458473][ T8997] EXT4-fs (loop2): Could not load journal inode [ 128.466814][ T8997] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 128.535529][ T9001] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 128.630553][ T9008] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1826'. [ 128.658754][ T9010] loop0: detected capacity change from 0 to 1024 [ 128.675096][ T9012] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=36619 sclass=netlink_route_socket pid=9012 comm=syz.2.1829 [ 128.689246][ T9010] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.707496][ T9016] SELinux: security_context_str_to_sid () failed with errno=-22 [ 128.719499][ T9012] loop2: detected capacity change from 0 to 512 [ 128.727500][ T9012] EXT4-fs: Ignoring removed oldalloc option [ 128.734055][ T9012] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 128.746561][ T9012] EXT4-fs (loop2): 1 truncate cleaned up [ 128.752744][ T9012] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.803252][ T9012] loop2: detected capacity change from 512 to 64 [ 128.826214][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.864244][ T9027] loop0: detected capacity change from 0 to 8192 [ 128.994536][ T3308] EXT4-fs warning (device loop2): ext4_evict_inode:276: xattr delete (err -12) [ 129.006887][ T3308] ------------[ cut here ]------------ [ 129.012378][ T3308] bad length passed for symlink [/tmp/syz-imagegen2884317625/] (got 39, expected 29) [ 129.012614][ T3308] WARNING: CPU: 0 PID: 3308 at ./include/linux/fs.h:803 inode_set_cached_link+0xc4/0xd0 [ 129.032126][ T3308] Modules linked in: [ 129.036103][ T3308] CPU: 0 UID: 0 PID: 3308 Comm: syz-executor Not tainted 6.14.0-rc6-syzkaller-00003-g4d872d51bc9d #0 [ 129.047004][ T3308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 129.057139][ T3308] RIP: 0010:inode_set_cached_link+0xc4/0xd0 [ 129.063125][ T3308] Code: ff 48 c7 c7 9f f6 b2 86 e8 59 5f c4 ff c6 05 c1 60 0b 05 01 90 48 c7 c7 61 40 1b 86 4c 89 f6 89 ea 44 89 f9 e8 bd b3 8c ff 90 <0f> 0b 90 90 eb 84 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 [ 129.073603][ T9034] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 129.082755][ T3308] RSP: 0018:ffffc90001607ac8 EFLAGS: 00010246 [ 129.097489][ T3308] RAX: 8445e2bde2d61700 RBX: ffff888105755328 RCX: ffff88810462e300 [ 129.105514][ T3308] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 129.113587][ T3308] RBP: 0000000000000027 R08: ffffffff81344b17 R09: 0000000000000000 [ 129.121580][ T3308] R10: 0001ffffffffffff R11: ffff88810462e300 R12: ffff888105755328 [ 129.129608][ T3308] R13: ffff888105755350 R14: ffff888105755200 R15: 000000000000001d [ 129.137594][ T3308] FS: 0000555572d0d500(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 [ 129.146576][ T3308] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 129.153158][ T3308] CR2: 00007ffeadd55ff8 CR3: 0000000104df6000 CR4: 00000000003506f0 [ 129.161214][ T3308] DR0: 0100000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 129.169204][ T3308] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 129.177196][ T3308] Call Trace: [ 129.180456][ T3308] [ 129.183406][ T3308] ? __warn+0x141/0x350 [ 129.187562][ T3308] ? report_bug+0x315/0x420 [ 129.192168][ T3308] ? inode_set_cached_link+0xc4/0xd0 [ 129.197476][ T3308] ? handle_bug+0x60/0x90 [ 129.201874][ T3308] ? exc_invalid_op+0x1a/0x50 [ 129.206571][ T3308] ? asm_exc_invalid_op+0x1a/0x20 [ 129.211754][ T3308] ? __warn_printk+0x167/0x1b0 [ 129.216581][ T3308] ? inode_set_cached_link+0xc4/0xd0 [ 129.221874][ T3308] ? inode_set_cached_link+0xc3/0xd0 [ 129.227240][ T3308] __ext4_iget+0x1bb5/0x1e20 [ 129.231871][ T3308] ext4_lookup+0x15b/0x390 [ 129.236323][ T3308] __lookup_slow+0x18a/0x250 [ 129.240904][ T3308] lookup_slow+0x3c/0x60 [ 129.245168][ T3308] walk_component+0x1f5/0x230 [ 129.249872][ T3308] ? path_lookupat+0xfd/0x2b0 [ 129.254567][ T3308] path_lookupat+0x10a/0x2b0 [ 129.259136][ T3308] filename_lookup+0x150/0x340 [ 129.263949][ T3308] user_path_at+0x3c/0x120 [ 129.268352][ T3308] __x64_sys_umount+0x85/0xe0 [ 129.273014][ T3308] x64_sys_call+0x20cd/0x2dc0 [ 129.277706][ T3308] do_syscall_64+0xc9/0x1c0 [ 129.282213][ T3308] ? clear_bhb_loop+0x55/0xb0 [ 129.286893][ T3308] ? clear_bhb_loop+0x55/0xb0 [ 129.291552][ T3308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.297456][ T3308] RIP: 0033:0x7f809531e497 [ 129.301863][ T3308] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 129.321480][ T3308] RSP: 002b:00007ffeadd56258 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 129.329913][ T3308] RAX: ffffffffffffffda RBX: 00007f809539e08c RCX: 00007f809531e497 [ 129.337909][ T3308] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffeadd56310 [ 129.345874][ T3308] RBP: 00007ffeadd56310 R08: 0000000000000000 R09: 0000000000000000 [ 129.353857][ T3308] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffeadd57400 [ 129.361816][ T3308] R13: 00007f809539e08c R14: 000000000001f7c6 R15: 00007ffeadd595c0 [ 129.369807][ T3308] [ 129.372803][ T3308] ---[ end trace 0000000000000000 ]--- [ 129.380189][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.472827][ T9044] loop0: detected capacity change from 0 to 512 [ 129.481656][ T9044] EXT4-fs: Ignoring removed bh option [ 129.487808][ T9044] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 129.499353][ T9044] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 129.507432][ T9044] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=884ec128, mo2=0002] [ 129.519069][ T9044] EXT4-fs (loop0): orphan cleanup on readonly fs [ 129.525424][ T9044] EXT4-fs error (device loop0): ext4_quota_enable:7097: comm syz.0.1841: Bad quota inum: 4294967291, type: 0 [ 129.537566][ T9044] EXT4-fs (loop0): Remounting filesystem read-only [ 129.544137][ T9044] EXT4-fs warning (device loop0): ext4_enable_quotas:7145: Failed to enable quota tracking (type=0, err=-117, ino=4294967291). Please run e2fsck to fix. [ 129.559522][ T9044] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 129.567379][ T9061] loop5: detected capacity change from 0 to 8192 [ 129.567828][ T9044] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 129.587596][ T9044] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 129.599345][ T9062] loop1: detected capacity change from 0 to 1024 [ 129.602809][ T9044] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.608784][ T9062] EXT4-fs: Ignoring removed orlov option [ 129.620343][ T9062] EXT4-fs: Ignoring removed nomblk_io_submit option [ 129.669411][ T9062] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.684282][ T9075] futex_wake_op: syz.4.1849 tries to shift op by 32; fix this program [ 129.715974][ T9083] tipc: Enabling of bearer rejected, already enabled [ 129.730923][ T9085] ================================================================== [ 129.739001][ T9085] BUG: KCSAN: data-race in mas_wmb_replace / mtree_range_walk [ 129.746455][ T9085] [ 129.748764][ T9085] write to 0xffff8881036c5500 of 8 bytes by task 9084 on cpu 1: [ 129.756375][ T9085] mas_wmb_replace+0xe89/0x14d0 [ 129.761211][ T9085] mas_wr_store_entry+0x1530/0x23f0 [ 129.766400][ T9085] mas_store_prealloc+0x6bf/0x960 [ 129.771415][ T9085] vma_complete+0x3a7/0x760 [ 129.775914][ T9085] __split_vma+0x620/0x6a0 [ 129.780314][ T9085] vma_modify+0x1a2/0x200 [ 129.784629][ T9085] vma_modify_flags+0xf1/0x120 [ 129.789374][ T9085] mprotect_fixup+0x31a/0x5e0 [ 129.794038][ T9085] do_mprotect_pkey+0x6cc/0x9a0 [ 129.798877][ T9085] __x64_sys_mprotect+0x48/0x60 [ 129.803712][ T9085] x64_sys_call+0x2770/0x2dc0 [ 129.808379][ T9085] do_syscall_64+0xc9/0x1c0 [ 129.812874][ T9085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.818755][ T9085] [ 129.821061][ T9085] read to 0xffff8881036c5500 of 8 bytes by task 9085 on cpu 0: [ 129.828588][ T9085] mtree_range_walk+0x33d/0x460 [ 129.833432][ T9085] mas_walk+0x16e/0x320 [ 129.837575][ T9085] lock_vma_under_rcu+0x95/0x270 [ 129.842498][ T9085] exc_page_fault+0x150/0x650 [ 129.847163][ T9085] asm_exc_page_fault+0x26/0x30 [ 129.852002][ T9085] [ 129.854306][ T9085] value changed: 0xffff8881036c560e -> 0xffff8881036c5500 [ 129.861395][ T9085] [ 129.863699][ T9085] Reported by Kernel Concurrency Sanitizer on: [ 129.869831][ T9085] CPU: 0 UID: 0 PID: 9085 Comm: syz.0.1853 Tainted: G W 6.14.0-rc6-syzkaller-00003-g4d872d51bc9d #0 [ 129.881967][ T9085] Tainted: [W]=WARN [ 129.885750][ T9085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 129.895787][ T9085] ================================================================== [ 129.918534][ T9091] loop5: detected capacity change from 0 to 512 [ 129.925094][ T9091] EXT4-fs: Ignoring removed i_version option [ 129.931082][ T9091] EXT4-fs: Ignoring removed mblk_io_submit option [ 129.937605][ T9091] ext4: Unknown parameter 'nouser_xattr' [ 130.324436][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.