last executing test programs: 10.096252048s ago: executing program 1 (id=5342): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x230, 0x12, 0x60a, 0x0, 0x202, 0x338, 0x2e8, 0x2e8, 0x338, 0x2c0, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @dev}, @mcast2, [], [], 'veth1_to_bond\x00', 'xfrm0\x00'}, 0x0, 0x108, 0x230, 0x0, {}, [@common=@unspec=@statistic={{0x38}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x57c, 'system_u:object_r:file_context_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x39e}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) 10.01232736s ago: executing program 1 (id=5343): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ff"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) madvise(&(0x7f0000001000/0x3000)=nil, 0xffffffffdfffefff, 0x9) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x8) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000780)='./bus\x00', 0x20008c0, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x80, 0x364, &(0x7f0000000400)="$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") sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) 9.717232194s ago: executing program 1 (id=5348): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r2 = dup(r1) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r1}, 0x8) ioctl$FS_IOC_GETFSLABEL(r3, 0x81009431, &(0x7f00000002c0)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX=r0, @ANYBLOB="2c7766640ae0d0", @ANYRESHEX=r2, @ANYBLOB=',msize=0x0000000000000000,k']) r4 = io_uring_setup(0x479, &(0x7f0000000ac0)={0x0, 0x905e, 0x2, 0x2, 0x4000020}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r6, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r7, &(0x7f0000000040)="a6", 0xffffff4c, 0x0, 0x0, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r8, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r8, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) close_range(r4, 0xffffffffffffffff, 0x0) 8.801033667s ago: executing program 1 (id=5360): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000007c0), 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48) setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[@ANYBLOB="00fbd00e09ba2bdf1a8dff61d9e40efce0604b4e198554d836183cf7c86f9aad4fc74cec7edfe4a0c4956051363b69ae0076dab5bc35d753e3d39214145222350474db68c080d8d91cbbfe841d2b6389340bf6206a900fccfefcd50c0e9276f156bc9cea9207e51ff67c25e5f1eb1f3fd3ce9b7cc846c6087967c0cc34e48312801cbddb51f312c6719de377c36f243be74c58234ab686812e1e849f3594398dc6f3f8ecc44f85fe90ba659bb3802367016157c8dec417987f8d1788a99c7b3e662fe45236290070a343379a6163723b"], 0xd0, 0x2) faccessat2(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x80, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x80000, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0/../file0\x00', 0x580, 0x40) move_mount(r1, &(0x7f00000002c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x102) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRES32=r0, @ANYRES16=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$mptcp(&(0x7f0000000480), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="6000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0221000000000000140003006e657464657673696d300000000000001800168014000180100006"], 0x60}}, 0x88) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, @void, @value}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r7 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mtu(r7, 0x29, 0x17, &(0x7f00000000c0)=0x3, 0x4) sendto$inet6(r7, 0x0, 0x261ab8b315b2c199, 0x240010c0, &(0x7f0000000200)={0xa, 0x4e22, 0xfffffffe, @local, 0xaf3}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r8, &(0x7f0000003340)=[{{&(0x7f0000000fc0)={0x2, 0x4e23, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="000700000086060000000300"/24], 0x18}}], 0x1, 0x40) 8.678439s ago: executing program 1 (id=5361): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$sock(r0, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000200)}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="a6", 0x1}], 0x1}}], 0x2, 0x40000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x2}, 0x18) 8.66551521s ago: executing program 1 (id=5362): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$sock(r0, 0x0, 0x0, 0x40000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x2}, 0x18) 8.62626505s ago: executing program 32 (id=5362): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$sock(r0, 0x0, 0x0, 0x40000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x2}, 0x18) 3.393079319s ago: executing program 5 (id=5413): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRES16], 0x86, 0x2a9, &(0x7f0000000c00)="$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") statfs(&(0x7f0000000180)='./file1\x00', &(0x7f0000000340)=""/142) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xf, 0x4, 0x4, 0x2012, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) recvmsg$unix(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r7, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x230, 0x12, 0x60a, 0x0, 0x202, 0x338, 0x2e8, 0x2e8, 0x338, 0x2c0, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @dev}, @mcast2, [], [], 'veth1_to_bond\x00', 'xfrm0\x00'}, 0x0, 0x108, 0x230, 0x0, {}, [@common=@unspec=@statistic={{0x38}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x57c, 'system_u:object_r:file_context_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x39e}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) 3.106174123s ago: executing program 5 (id=5416): bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0xc798dfe782204a1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x49e0, 0xffff, 0x0, 0xbfff, 0x0, "ec28a144f13d7607"}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={0x0}, 0xac08, 0x0, 0x800000, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = memfd_create(&(0x7f00000005c0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\x00\x00\x00\x00\x00\x00\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\xbd\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\x17\x871N:\xb4\xea \x8e\xdelP\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\x89\xa6D\xce\xac\x03\xc1\x83\xd1\xe6 |\xa75\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0VFw\b!\xae\x1baTv\xc0z\x19\xc5\xc8w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x88\xaa\x81\xc8\xa2\xdeI\xa2\xbel\x0e\xec\x17fNI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N\xf8\xdb\xab\xa0\x94~\xa1]b\xa4\xe5\xe2e\x1c\x8b\xd2\xc7Md\x93\x02\xd8\xb0,\xeb\x03\xaa\v\xed\x9bR\x8a\x80\xc2\x1f\x17ej\x973wv\x83a\xe06\x96\xde\xbc%Uh;H\xf8S\xf1\xa1g\x02\xc4\xc3\xa4\xa8\x96\t\xfex\xa2?\xcb\\Y\x1e\xfe\xca\xa0i\x80O\x11\xac\xb7$\xdb\xbc\xb0\xcb\xacqU\xb5*\x00\x00\x00\x00\x00\x00\x00\f\xda\xf8oV\x89\xd3\x1f\x99+\xe5T\x8eM4\x1c\xc6\x7f\xd4\xf2\xcc\xd3\x94\xca\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00~A9\xf6IBu2L\x9e\xa2\xd0\x92\xd1\xbc\xb8\tJ\xa1\aN\x87\x95\xbb\xa9s\xab\x90\x06\xc6!p\x9e?~\xf9\xe6\xae*\v\xa3\xd9gxKN\'z]*\x93\xf7\b\x91\xd0\xff\xd9\xc6a\xb5q\x9c\xa1Go\xd58\x93\xe0,\x9f\xe4\xa9\xd9A\x9e\x95e\x98\xd0V\x9d\xed\x97\xf1\xc5\xce\xf5\x90!d\x9a\xd8\x10\xbbx\r8\xff\x8bNUK\xebA\xe5\x92f\xc4\xd1\xa8\x15\xbf\xb5iW\xdb.kbf*\x89\xf0\xecq m-~\xbbf?\xec=\xd2\xe2\x1e\x8d/o\xcd\xc8x\xdb\xe6\xd0W\xca\xc5kz\x8e9\xfa\x86\x0f\x96p', 0x3) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000000}) socket$pppoe(0x18, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x4, 0x0, 0x3, "0062ba7d820000a75e0000000000fcff00"}) r2 = syz_open_pts(r0, 0x0) r3 = dup3(r2, r0, 0x0) set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) syz_genetlink_get_family_id$tipc(&(0x7f0000001e80), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x4044054) epoll_create(0x3eb) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TIOCSTI(r3, 0x5412, 0x0) 2.256994996s ago: executing program 0 (id=5424): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)=@delchain={0x270, 0x65, 0x2, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x58, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_POLICE={0x24, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x24}, @TCA_POLICE_PEAKRATE64={0xc}]}, @TCA_BPF_CLASSID={0x8, 0x3, {0xb, 0xfff2}}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x20000000}, @TCA_RATE={0x6, 0x5, {0x6, 0x2}}, @filter_kind_options=@f_route={{0xa}, {0x1c8, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_TO={0x8, 0x2, 0xca}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x1ac, 0x6, [@m_mirred={0xe4, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0xb5, 0x6, "323ee0011e9773588356460465246c286b0c19c8696a6e30c2eaac25a8e17e586969fbc4736a59c344d6a75c8c47311b872b949e0150f026ddbbfaec36f19c3fcb311be2bfa7868fc17bd7119df75573e017e0a43314c559c9f175a2197d89121af0d976d2ec57cc85f19e63f752afd4e5dcec7b20ac52043f46883ce0db024eb1738448b508cac9a3581aa6150f6f3857e242dba946fdb14b091191b9e199e40ed08e99ec0b676720a21ac8cae293af06"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_connmark={0x38, 0x0, 0x0, 0x0, {{0xd}, {0x4}, {0x5, 0x6, 'f'}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_bpf={0x8c, 0x4, 0x0, 0x0, {{0x8}, {0x64, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x80, 0x49, 0xb0, 0x7f7}, {0x7, 0x0, 0x9, 0x200}, {0x7fff, 0x6, 0x1, 0x4}, {0x5, 0x5, 0x1, 0x5}, {0x101, 0x14, 0xe5, 0x2}, {0x4, 0x4, 0x6, 0xffffffff}, {0x6, 0x0, 0x5, 0x4}]}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}, @TCA_ACT_BPF_OPS={0x1c, 0x4, [{0x4, 0x3, 0x0, 0xfffffffb}, {0x4, 0x4, 0xfa, 0xb38d}, {0x404, 0xce, 0x6}]}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x270}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)=@delchain={0x270, 0x65, 0x2, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x58, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_POLICE={0x24, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x24}, @TCA_POLICE_PEAKRATE64={0xc}]}, @TCA_BPF_CLASSID={0x8, 0x3, {0xb, 0xfff2}}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x20000000}, @TCA_RATE={0x6, 0x5, {0x6, 0x2}}, @filter_kind_options=@f_route={{0xa}, {0x1c8, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_TO={0x8, 0x2, 0xca}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x1ac, 0x6, [@m_mirred={0xe4, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0xb5, 0x6, "323ee0011e9773588356460465246c286b0c19c8696a6e30c2eaac25a8e17e586969fbc4736a59c344d6a75c8c47311b872b949e0150f026ddbbfaec36f19c3fcb311be2bfa7868fc17bd7119df75573e017e0a43314c559c9f175a2197d89121af0d976d2ec57cc85f19e63f752afd4e5dcec7b20ac52043f46883ce0db024eb1738448b508cac9a3581aa6150f6f3857e242dba946fdb14b091191b9e199e40ed08e99ec0b676720a21ac8cae293af06"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_connmark={0x38, 0x0, 0x0, 0x0, {{0xd}, {0x4}, {0x5, 0x6, 'f'}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_bpf={0x8c, 0x4, 0x0, 0x0, {{0x8}, {0x64, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x80, 0x49, 0xb0, 0x7f7}, {0x7, 0x0, 0x9, 0x200}, {0x7fff, 0x6, 0x1, 0x4}, {0x5, 0x5, 0x1, 0x5}, {0x101, 0x14, 0xe5, 0x2}, {0x4, 0x4, 0x6, 0xffffffff}, {0x6, 0x0, 0x5, 0x4}]}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}, @TCA_ACT_BPF_OPS={0x1c, 0x4, [{0x4, 0x3, 0x0, 0xfffffffb}, {0x4, 0x4, 0xfa, 0xb38d}, {0x404, 0xce, 0x6}]}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x270}, 0x1, 0x0, 0x0, 0x81}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0x2, [@typedef={0x11}, @func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0x9, 0x4}, {0x8}, {0x4, 0x5}, {0x9, 0x4}, {0x7, 0xfffffffe}, {0x6, 0x2}, {0x0, 0x1}, {0xd, 0x5}, {0xc, 0x1}]}]}}, &(0x7f0000000540)=""/218, 0x72, 0xda, 0x1, 0x0, 0x0, @void, @value}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0x2, [@typedef={0x11}, @func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0x9, 0x4}, {0x8}, {0x4, 0x5}, {0x9, 0x4}, {0x7, 0xfffffffe}, {0x6, 0x2}, {0x0, 0x1}, {0xd, 0x5}, {0xc, 0x1}]}]}}, &(0x7f0000000540)=""/218, 0x72, 0xda, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1, 0x6, 0x8, 0x8, 0x40, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1, 0x6, 0x8, 0x8, 0x40, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ptrace$setsig(0x4203, r3, 0x3ff, &(0x7f0000000180)={0x40, 0x3, 0x5}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x88441) msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000740)=""/134) (async) msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000740)=""/134) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$USBDEVFS_SUBMITURB(r9, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) close_range(r6, 0xffffffffffffffff, 0x0) (async) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000850000000800000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) gettid() timer_create(0x3, 0x0, &(0x7f0000044000)) ptrace$getregs(0xe, r3, 0x282, &(0x7f00000002c0)=""/173) (async) ptrace$getregs(0xe, r3, 0x282, &(0x7f00000002c0)=""/173) socket$nl_netfilter(0x10, 0x3, 0xc) 1.885562932s ago: executing program 3 (id=5425): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r2 = dup(r1) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r1}, 0x8) ioctl$FS_IOC_GETFSLABEL(r3, 0x81009431, &(0x7f00000002c0)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB="2c7766640ae0d0", @ANYRESHEX=r2, @ANYBLOB=',msize=0x0000000000000000,k']) r4 = io_uring_setup(0x479, &(0x7f0000000ac0)={0x0, 0x905e, 0x2, 0x2, 0x4000020}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r6, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r7, &(0x7f0000000040)="a6", 0xffffff4c, 0x0, 0x0, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r8, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r8, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) close_range(r4, 0xffffffffffffffff, 0x0) 1.857321382s ago: executing program 5 (id=5426): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRES16], 0x86, 0x2a9, &(0x7f0000000c00)="$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") statfs(&(0x7f0000000180)='./file1\x00', &(0x7f0000000340)=""/142) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xf, 0x4, 0x4, 0x2012, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) recvmsg$unix(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r7, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x230, 0x12, 0x60a, 0x0, 0x202, 0x338, 0x2e8, 0x2e8, 0x338, 0x2c0, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @dev}, @mcast2, [], [], 'veth1_to_bond\x00', 'xfrm0\x00'}, 0x0, 0x108, 0x230, 0x0, {}, [@common=@unspec=@statistic={{0x38}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x57c, 'system_u:object_r:file_context_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x39e}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) 1.813708433s ago: executing program 0 (id=5428): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x2}, 0x18) 1.776490603s ago: executing program 0 (id=5430): prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='%-\'$]\x00') socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000002c0), 0x4000, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="060000000400"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x25, 0x8, @void}, 0x10) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r4, &(0x7f0000000340)={0x8}) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x5}}, 0xfe89) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0xfffe, 0x0, @empty, 0x4}, {0xa, 0x0, 0x0, @loopback, 0xfffffffc}, r5, 0x400}}, 0x48) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000980)={0x16, 0x98, 0xfa00, {0x0, 0x2, r5, 0x30, 0x1, @ib={0x1b, 0x1, 0x1, {"c6b7b7e198082124066b72a4ca8bf843"}, 0x7, 0x7, 0x3}}}, 0xa0) creat(&(0x7f0000000040)='./bus\x00', 0x8) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000180)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@bsdgroups}, {@lazytime}, {@noload}]}, 0x3, 0x45c, &(0x7f0000002400)="$eJzs3MtvG8UfAPDv+pG+m/yq/oA+gCBAlAJJk5bSAxcQSBxAQoJDOYYkrUrdBjVBIlUFBaFyRJU4cUEckfgLOMEFASckLhzgjipVqJcWTkYb76a2a+dVP0j9+UjrzuyuO/P1ztizM7EDGFij6UMSsTMifo+I4Vq28YTR2j+3blya/vvGpekkqtU3/kpK6eGbNy5N56fmz9uRZ0oRhU+SONCi3PnFi2enKpXZC1l+fOHcu+PzixefOXNu6vTs6dnzkydOHDs68dzxyWc7Emca1839H8wd3PfKW1dfmz559e2fvkny+Jvi6JDRlQ4+Xq12uLj+2lWXrrUMNoNirZtGean/D0cxbl+84Xj5475WDuiqarVava/94ctV4B6WRL9rAPRH/kGf3v/mW4+GHv8J11+o3QClcd/KttqRUhSyc8pN97edNBoRJy//82W6RXfmIQAAGnyXjn+ebjX+K0T9vNDubA1lJCL+FxF7IuJ4ROyNiP9HLJ17f0Q8sM7ymxdJ7hz/FK5tKLA1Ssd/z2drW43jv3z0FyPFLLdrKf5ycupMZfZI9pocivKWND+xQhnfv/TrZ+2O1Y//0i0tPx8LZvW4VtrS+JyZqYWpu4m53vWPIvaXWsWfLK8EJBGxLyL2b7CMM4e/Ptju2Orxr6AD60zVryKeqF3/y9EUfy5ZeX1yfGtUZo+M563iTj//cuX1duXfVfwdkF7/7S3b/3L8I0n9eu38ev73L55MH6/88Wnbe5qNtv+h5M2Gfe9PLSxcmIgYSl6tVbp+/2TTeZO3z0/jP/Ro6/6/J26/EgciIm3ED0bEQxHxcFb3R37bveqr8OOLj72z8fi7K41/Zu3XvzockTeExaHIEst7WieKZ3/4tqHQkdbx7257/Y8tpQ5le9by/reWeq23NQMAAMBmVYiInZEUxpbThcLYWO1v+PfG9kJlbn7hqVNz752fqX1HYCTKhXyma7huPnQiu63P85NN+aPZvPHnxW1L+bHpucpMv4OHAbejTf9P/Vnsd+2ArvN9LRhc+j8MLv0fBted/X9rX+oB9F6Lz/9t/agH0Hutxv8fruWJOztfF6C3mvq/ZT8YIOb/YHBtpP97z4B7Q2mln2we6mlVgN6Z3xarf0leYjMl8l+u6UYR5bS1HI6IxYtR6HukEl1M9PudCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDP+DQAA//+CSeFs") 1.747973704s ago: executing program 0 (id=5431): openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r3, 0x4b52, &(0x7f0000000000)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r4) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f0070687930"], 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00'}) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c5902, 0x0) write(r6, &(0x7f0000004200)='t', 0x1) sendfile(r6, r1, 0x0, 0x3ffff) sendfile(r6, r1, 0x0, 0x7ffff000) fallocate(r0, 0x0, 0x0, 0x1001f0) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) lsm_get_self_attr(0x66, 0x0, &(0x7f0000000100), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) 1.745483104s ago: executing program 2 (id=5432): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e0000000400000008", @ANYBLOB="00000013"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000415001a110000b67405a87156343365bb1ffb5cfda73d9205b0bcc0528b958dedbfd79f976162777ac2e5e313b1a6d49a7a614aa16115382ddef4271a9f58ab3ab1c336d9205f321b05cb7bc5ed1c68d4b580e869dc7c1efc8e7f86c39cfe816b6dad82bc8c0b1f13015cb77d4b0dfa5caedc5bbdc5684fe92b9176abb437dd15cd637255b6fb9edeba685660d93f3f45c402dad243726acb600067a3cf793c3299af18fd6d31d9b54c677d227e6ca2f2735a224ad4eeb9d764501d81064a612900169219492efd7ec2a5346fbe6096855b5d20c7e7d5e2e1806d1948f3c92a8e380338aee3af566af538091e2f220b0572d92a07f1a6d1632f261cc6663c9f2a68dd77c0206ad256f1df40796e253fe4385a5a50749d6bb7d206922a23d3afd17982647ee1406dd215571af026d0092d593500"/348, @ANYRES8=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64, @ANYRESHEX=r1], 0x9, 0x536, &(0x7f0000000fc0)="$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") socket$inet6(0xa, 0x5, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000000)='mm_page_alloc\x00'}, 0x10) r3 = socket(0x15, 0x5, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getsockopt(r3, 0x200000000114, 0x2721, 0x0, &(0x7f0000000000)) r4 = socket$kcm(0xa, 0x3, 0x73) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1000000000000000290000000b0000"], 0x10}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xffffffff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000100000005000500eeffffff0000000000000000"], 0x24}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="01000000af59731d768ec1b7932c742b48c013699dc204", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f0000000a80)=ANY=[@ANYBLOB="18000000000000000000000000af4e0018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000400)='GPL\x00', 0x2, 0xf8, &(0x7f00000008c0)=""/248, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) chdir(0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x9, 0x8}, 0x1ba12, 0x5dd8, 0x3, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x200000004000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="a1ab000000000000000005000000080001"], 0x28}, 0x1, 0x0, 0x0, 0x4044}, 0xc000) unlink(0x0) write$P9_RAUTH(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 1.599688686s ago: executing program 5 (id=5433): openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r3, 0x4b52, &(0x7f0000000000)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r4) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f0070687930"], 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00'}) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c5902, 0x0) write(r6, &(0x7f0000004200)='t', 0x1) sendfile(r6, r1, 0x0, 0x3ffff) sendfile(r6, r1, 0x0, 0x7ffff000) fallocate(r0, 0x0, 0x0, 0x1001f0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) lsm_get_self_attr(0x66, 0x0, &(0x7f0000000100), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) 1.598584066s ago: executing program 2 (id=5434): process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000008640)=[{0x0}], 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x44084) (fail_nth: 1) 1.32236918s ago: executing program 2 (id=5436): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) 1.281343911s ago: executing program 2 (id=5437): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES16=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) ioperm(0x2, 0x1, 0x9) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1100, 0x5dd9, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0xfffffffd, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000b00)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2008002, &(0x7f00000000c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1000}}, {@nodiscard}, {@quota}]}, 0x1, 0x558, &(0x7f0000000680)="$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") mkdir(&(0x7f0000000100)='./bus\x00', 0x1) 1.024663654s ago: executing program 2 (id=5438): creat(&(0x7f00000000c0)='./file0\x00', 0x198) pipe2$9p(&(0x7f0000000000), 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6(0xa, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) dup(0xffffffffffffffff) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002004e22e00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1414aa000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e20ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x20000) 971.790666ms ago: executing program 3 (id=5440): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b7040084fc32857753b30008000000850000009500000900"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x2, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001140)={&(0x7f00000004c0)='mm_page_free\x00', r1, 0x0, 0x7ff}, 0x18) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000a715041a5f64ea3d822b0007020000f8ffffffb703000008000000b7040000000000008500000082000000954033025c3baa30d54386fa47a4d2ec7903dc3722276d2c82eae259ae0ff460046adf4ef2c02f1fbede6e34dec7896d158e91a0430c31f5a3d5e3c53030df4150277d2e2098f6ebc6810c82a9fde442bc7ee5bc7cd7a93e68e200000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000900)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRESOCT=r4, @ANYRESHEX=r2], 0x0, 0xa, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff98, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r5}, 0x10) r6 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@secondary) add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, r6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r4}, 0x18) r7 = shmget$private(0x0, 0x1000, 0x800, &(0x7f00002a2000/0x1000)=nil) shmctl$IPC_RMID(r7, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kmem_cache_free\x00', r8}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x4, 0x0, 0x7ffc0002}]}) ustat(0x4, 0x0) setitimer(0x1, &(0x7f00000001c0)={{0x0, 0x2710}}, &(0x7f00000002c0)) process_vm_writev(0x0, &(0x7f0000000500)=[{0x0}, {0xffffffffffffffff}, {0xfffffffffffffffc}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) pipe2$9p(&(0x7f0000000000), 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f00000003c0)='xs_stream_read_request\x00', r8}, 0x18) recvfrom$unix(0xffffffffffffffff, &(0x7f0000001180)=""/4096, 0x1000, 0x0, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e21}, 0x6e) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb01001800000000000600000000002c00000002000000000000000100000d0a01"], 0x0, 0x46, 0x0, 0x1, 0x40, 0x0, @void, @value}, 0x28) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x400240, 0x8) 903.101506ms ago: executing program 3 (id=5441): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$sock(r0, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)=' ', 0x34000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="a6", 0x1}], 0x1}}], 0x2, 0x40000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x2}, 0x18) 902.605836ms ago: executing program 4 (id=5442): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(0x0, 0x0) (fail_nth: 4) 675.22736ms ago: executing program 2 (id=5443): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000780)='./bus\x00', 0x20008c0, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x80, 0x364, &(0x7f0000000400)="$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") sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f0000000180), &(0x7f0000000200)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mincore(&(0x7f0000b04000/0x4000)=nil, 0x4000, &(0x7f0000000380)=""/88) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='.\x00', 0xc0000484) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) 660.98573ms ago: executing program 3 (id=5444): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) 660.60004ms ago: executing program 0 (id=5445): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1400"], 0x18}, 0x4000000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x2, 0xfcc3, 0x8001}) r2 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0x7005, 0x0) readv(r2, &(0x7f0000000000)=[{&(0x7f00000012c0)=""/191, 0x4}], 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5, 0x0, 0xfffffffff7ffffe9}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r6, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r6, 0x8943, &(0x7f0000000000)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="1400000010000000000000892948d510e7b0f3f128bf502e0000000a20000000000a01020400000000000000010000000900010073797a0000160a010000279ac44a000000797a30000000000900020073797a30000000002c00038008000140000f00e60700024000000000180003400000000076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00036222b6f4628ce8d7488700779f0f5b8014888db566d314579503562cc70001007665"], 0xfc}, 0x1, 0x0, 0x0, 0x4044800}, 0x1) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r8}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f00000009c0)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 633.966801ms ago: executing program 5 (id=5446): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x4, 0x85) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x1000, @private2, 0xffffffe4}, 0x1c) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00"], 0xa8}}, 0x0) 590.788931ms ago: executing program 4 (id=5447): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@nodioread_nolock}, {}, {@sysvgroups}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x1}}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") (async) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) truncate(&(0x7f0000000100)='./file0/file0\x00', 0x9) (async) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) (async) syz_mount_image$iso9660(&(0x7f0000000300), &(0x7f00000003c0)='./bus/file0\x00', 0x120c018, &(0x7f0000000180)=ANY=[@ANYBLOB='check=relaxed,map=normal,nojoliet,cruft,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c646d6f64653d3078303030010030303030303030313030302c73657373696f6e3d3078303030303030303030303030303030362c6d61703d6e6f726d616c2c00"], 0xff, 0x54d, &(0x7f0000002000)="$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") (async) socket$netlink(0x10, 0x3, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x80142, 0x14) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) (async) getpgid(0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0xac63094eb3328933, 0x0) (async) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e21, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "6d4dfdeb8cf7bbfe143803bec2ce783e04cd32308cdd8dde", "c71cb8adfce542a4bc5a026c208fd0c45787e4aa384e3d26b21ea41cc128364c"}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r1 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000"], 0x48) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_enter\x00', r3}, 0x10) (async) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x10) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000000102010400"], 0x20}, 0x1, 0x0, 0x0, 0x45}, 0x4000000) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x7, &(0x7f0000000080)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) 590.372951ms ago: executing program 0 (id=5448): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ff"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) madvise(&(0x7f0000001000/0x3000)=nil, 0xffffffffdfffefff, 0x9) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) 530.333672ms ago: executing program 4 (id=5449): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES16=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) ioperm(0x2, 0x1, 0x9) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1100, 0x5dd9, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0xfffffffd, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2008002, &(0x7f00000000c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1000}}, {@nodiscard}, {@quota}]}, 0x1, 0x558, &(0x7f0000000680)="$eJzs3c9vI1cdAPDvTH52d9vsQg9QAbtAYUGrtTfedlX10nIBoaoSouKAOGxD4o3C2nGIndKESKR/A0ggcYI/gQMSB6SeOHDjiMQBEOWAVCACbZA4GM14kriJw5rEsdn485Fm58ebme979s6852dnXgBj60ZE7ETEdES8GRFzxfakmOLVzpTt92h3e3Fvd3sxiXb7jb8leXq2LbqOyVwuzjkbEV/9UsQ3k+Nxm5tbDxdqtep6sV5u1dfKzc2t2yv1heXqcnW1Urk3f+/OS3dfrAysrNfrP3v/iyuvfe2Xv/j4e7/Z+fx3s2xdKdK6yzFInaJPHcTJTEbEa+cRbAQmivn0iPPB6aQR8aGI+FR+/c/FRP6/EwC4yNrtuWjPda8DABddmveBJWkpItK0aASUOn14z8altNZotm49aGysLnX6yq7GVPpgpVa9c23md9/Od55KsvX5PC1Pz9crR9bvRsS1iPjBzFP5emmxUVsaTZMHAMbe5e76PyL+OZOmpVJfh/b4Vg8AeGLMjjoDAMDQqf8BYPyo/wFg/PRR/xdf9u+ce14AgOHw+R8Axo/6HwDGj/ofAMbKV15/PZvae8Xzr5fe2tx42Hjr9lK1+bBU31gsLTbW10rLjcZy/sye+uPOV2s01uZfiI23y61qs1Vubm7drzc2Vlv38+d6369ODaVUAMB/c+36u79NImLn5afyKbrGclBXw8WWDnAv4MkycZaDNRDgiWa0LxhffVXheSPh1+eeF2A0ej7Me7bn4gf96H8I4ndG8H/l5kf77/83xjNcLHr2YXydrv//lYHnAxi+U/f//2Gw+QCGr91Ojo75P32QBABcSGf4CV/7e4NqhAAj9bjBvAfy/T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABcMFci4luRpKV8LPA0+zctlSKejoirMZU8WKlV70TEM3E9IqZmsvX5UWcaADij9C9JMf7XzbnnrxxNnU7+NZPPI+I7P37jh28vtFrr89n2vx9sn9kfPqxyeNwZxhUEAPr3p352yuvvSjHv+iD/aHd7cX86xzwe8/4XDgYfXdzb3c6nTspktNvtdsRs3pa49I8kJotjZiPiuYiYGED8nXci4iO9yp/kfSNXi5FPu+NHEfvpocZPPxA/zdM68+zl+/AA8gLj5t3s/vNqr+svjRv5vPf1P5vfoc4uv//NRuzf+/a64k8WkSZ6xM+u+Rv9xnjhV18+trE910l7J+K5yV7xk4P4yQnxn+8z/u8/9onvv3JCWvsnETejd/zuWOVWfa3c3Ny6vVJfWK4uV1crlXvz9+68dPfFSjnvoy7v91Qf99eXbz1zUt6y8l86IX7nnb98pPzTB8d+ps/y//Tfb37jk4erM0fjf+7Tvd//Z/N579c/qxM/22f8hUs/P3H47iz+0gnlf9z7f6vP+O/9eWupz10BgCFobm49XKjVqutnWsg+hQ7iPMcWsiz2t/N+c/FsQf8Y+cLhy5JEEoMuV9YY62fnqfN6Vc99YfKgrTjYM389O+OQi5MOvBSnWYirxcKjYQUd3T0JGI7Di37UOQEAAAAAAAAAAAAAAE4yjL9hGnUZAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuLj+EwAA//8GP8IF") mkdir(&(0x7f0000000100)='./bus\x00', 0x1) 528.851302ms ago: executing program 5 (id=5450): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r2 = dup(r1) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r1}, 0x8) ioctl$FS_IOC_GETFSLABEL(r3, 0x81009431, &(0x7f00000002c0)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB="2c7766640ae0d0", @ANYRESHEX=r2, @ANYBLOB=',msize=0x0000000000000000,k']) r4 = io_uring_setup(0x479, &(0x7f0000000ac0)={0x0, 0x905e, 0x2, 0x2, 0x4000020}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r6, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r7, &(0x7f0000000040)="a6", 0xffffff4c, 0x0, 0x0, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r8, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r8, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) close_range(r4, 0xffffffffffffffff, 0x0) 448.475563ms ago: executing program 3 (id=5451): rt_sigaction(0x3f, &(0x7f0000000940)={&(0x7f00000008c0)="c46279340cdbc4c261ad9a0c000000c4c2d503f264430fae54bcc0660f638d9b540000c482c5ac2c566742d0430366f30fbae70040d9fa90", 0x40000001, 0x0, {[0x40]}}, 0x0, 0x8, &(0x7f0000000a80)) 434.426334ms ago: executing program 3 (id=5452): r0 = msgget(0x2, 0x243) msgrcv(r0, 0x0, 0x0, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x18) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r2 = creat(&(0x7f0000000180)='./file0\x00', 0xe4) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) r3 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000340)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x21, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6b, 0x0, 0x0, 0x0, 0xb7}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x561}}, @ldst={0x1, 0x3, 0x3, 0x3, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='syzkaller\x00', 0x6daf947, 0x1b, &(0x7f0000000480)=""/27, 0x40f00, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x1, 0xb, 0x2, 0x2}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000500)=[r1], &(0x7f00000005c0)=[{0x4, 0x5, 0x7, 0xc}, {0x5, 0x3, 0xe, 0x8}, {0x4, 0x3, 0x10, 0x41027c7145922fcf}], 0x10, 0x0, @void, @value}, 0x94) getpeername$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000400)=0x14) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000540)=ANY=[@ANYRESOCT=r2, @ANYRES32=r4, @ANYBLOB="000098b1960fc500000000000000b7080000b2e900007b8af8ff00000000bfa2076f0702000009705c736f0000b704000000da000085000000000000626a91a79658"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff3, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='sys_enter\x00', r5}, 0x10) timer_create(0x2, 0x0, &(0x7f0000000700)=0x0) timer_getoverrun(r6) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) setgroups(0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0]) r7 = syz_mount_image$ext4(&(0x7f0000000200)='ext3\x00', &(0x7f0000000140)='./bus\x00', 0x20480e, &(0x7f0000000300)={[{@nombcache}, {@orlov}, {@nouid32}, {@debug}, {@grpjquota}], [{@defcontext={'defcontext', 0x3d, 'root'}}]}, 0x1, 0x45d, &(0x7f0000000d00)="$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") statx(r7, &(0x7f0000000640)='./bus\x00', 0x6000, 0x7ff, &(0x7f0000000b80)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) msgget$private(0x0, 0x0) 165.904088ms ago: executing program 4 (id=5453): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) syz_open_procfs(0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x20000000, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, 0x0, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 62.352599ms ago: executing program 4 (id=5454): r0 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x130) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) 0s ago: executing program 4 (id=5455): openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r3, 0x4b52, &(0x7f0000000000)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r4) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f0070687930"], 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00'}) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c5902, 0x0) write(r6, &(0x7f0000004200)='t', 0x1) sendfile(r6, r1, 0x0, 0x3ffff) sendfile(r6, r1, 0x0, 0x7ffff000) fallocate(r0, 0x0, 0x0, 0x1001f0) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) lsm_get_self_attr(0x66, 0x0, &(0x7f0000000100), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) kernel console output (not intermixed with test programs): DX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 391.563782][T17164] RBP: 00007f8c73387090 R08: 0000000000000000 R09: 0000000000000000 [ 391.563794][T17164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 391.563805][T17164] R13: 0000000000000000 R14: 00007f8c74f35fa0 R15: 00007ffe657962f8 [ 391.563824][T17164] [ 391.857142][T17168] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4896'. [ 391.883992][T17172] loop1: detected capacity change from 0 to 1024 [ 391.891934][T17172] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 391.913544][T17172] EXT4-fs error (device loop1): ext4_ext_check_inode:524: inode #11: comm syz.1.4898: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 391.933024][T17172] EXT4-fs error (device loop1): ext4_orphan_get:1395: comm syz.1.4898: couldn't read orphan inode 11 (err -117) [ 391.945318][T17176] loop3: detected capacity change from 0 to 512 [ 391.946204][T17172] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 391.954410][T17176] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 391.965853][T17177] 9pnet_fd: Insufficient options for proto=fd [ 391.988154][T17172] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.4898: Invalid block bitmap block 0 in block_group 0 [ 392.002539][T17172] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.4898: Failed to acquire dquot type 0 [ 392.097709][T11087] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.152259][T17181] Cannot find set identified by id 0 to match [ 392.161153][T17181] Restarting kernel threads ... done. [ 392.964650][T17201] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4909'. [ 393.590409][T17226] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4920'. [ 393.943644][T17239] loop1: detected capacity change from 0 to 2048 [ 393.956584][T17239] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 394.002431][T17244] loop4: detected capacity change from 0 to 512 [ 394.012958][T17244] journal_path: Non-blockdev passed as './bus' [ 394.019438][T17244] EXT4-fs: error: could not find journal device path [ 394.298255][T17253] loop4: detected capacity change from 0 to 128 [ 394.322916][T17253] EXT4-fs: Ignoring removed nobh option [ 394.341568][T17256] tipc: Enabling of bearer rejected, already enabled [ 394.364183][T17253] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 394.414436][T17253] ext4 filesystem being mounted at /325/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 394.582304][T12281] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 394.668977][T11087] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.707622][ T29] kauditd_printk_skb: 261 callbacks suppressed [ 394.707641][ T29] audit: type=1400 audit(1743454294.717:13905): avc: denied { create } for pid=17274 comm="syz.1.4936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 394.740644][ T29] audit: type=1400 audit(1743454294.717:13906): avc: denied { write } for pid=17274 comm="syz.1.4936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 394.777751][T17282] FAULT_INJECTION: forcing a failure. [ 394.777751][T17282] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 394.791064][T17282] CPU: 1 UID: 0 PID: 17282 Comm: syz.3.4941 Not tainted 6.14.0-syzkaller-10892-g4e82c87058f4 #0 PREEMPT(voluntary) [ 394.791094][T17282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 394.791109][T17282] Call Trace: [ 394.791117][T17282] [ 394.791203][T17281] loop1: detected capacity change from 0 to 512 [ 394.791171][T17282] dump_stack_lvl+0xf6/0x150 [ 394.791239][T17282] dump_stack+0x15/0x1a [ 394.791260][T17282] should_fail_ex+0x261/0x270 [ 394.791283][T17282] should_fail_alloc_page+0xfd/0x110 [ 394.791321][T17282] __alloc_frozen_pages_noprof+0x11e/0x340 [ 394.791357][T17282] alloc_pages_mpol+0xb6/0x260 [ 394.791456][T17282] vma_alloc_folio_noprof+0x1a2/0x310 [ 394.791484][T17282] handle_mm_fault+0xdec/0x2b30 [ 394.791521][T17282] ? __rcu_read_lock+0x36/0x50 [ 394.791556][T17282] ? __pte_offset_map_lock+0x1d3/0x290 [ 394.791665][T17282] __get_user_pages+0xf64/0x2350 [ 394.791724][T17282] __gup_longterm_locked+0x943/0xfb0 [ 394.791750][T17282] ? selinux_ptrace_access_check+0x106/0x120 [ 394.791785][T17282] ? down_read+0x173/0x4c0 [ 394.791825][T17282] ? __ptrace_may_access+0x2cb/0x350 [ 394.791891][T17282] pin_user_pages_remote+0x81/0xc0 [ 394.791934][T17282] process_vm_rw+0x4c2/0x8a0 [ 394.792057][T17282] ? kstrtouint+0x7b/0xc0 [ 394.792116][T17282] ? ksys_write+0x180/0x1b0 [ 394.792145][T17282] __x64_sys_process_vm_writev+0x7a/0x90 [ 394.792196][T17282] x64_sys_call+0xaf3/0x2e10 [ 394.792236][T17282] do_syscall_64+0xc9/0x1c0 [ 394.792259][T17282] ? clear_bhb_loop+0x25/0x80 [ 394.792299][T17282] ? clear_bhb_loop+0x25/0x80 [ 394.792325][T17282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.792394][T17282] RIP: 0033:0x7f8c74d1d169 [ 394.792415][T17282] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 394.792438][T17282] RSP: 002b:00007f8c73387038 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 394.792462][T17282] RAX: ffffffffffffffda RBX: 00007f8c74f35fa0 RCX: 00007f8c74d1d169 [ 394.792525][T17282] RDX: 0000000000000001 RSI: 0000200000001c80 RDI: 0000000000000428 [ 394.792542][T17282] RBP: 00007f8c73387090 R08: 0000000000000001 R09: 0000000000000000 [ 394.792557][T17282] R10: 0000200000001d80 R11: 0000000000000246 R12: 0000000000000001 [ 394.792573][T17282] R13: 0000000000000000 R14: 00007f8c74f35fa0 R15: 00007ffe657962f8 [ 394.792597][T17282] [ 395.128278][T17281] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 395.136612][T17281] EXT4-fs (loop1): orphan cleanup on readonly fs [ 395.143619][T17281] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.4940: invalid indirect mapped block 256 (level 2) [ 395.164257][T17281] EXT4-fs (loop1): 2 truncates cleaned up [ 395.171684][T17281] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 395.213494][T11087] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.479128][ T29] audit: type=1400 audit(1743454295.487:13907): avc: denied { connect } for pid=17292 comm="syz.4.4944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 395.533029][ T29] audit: type=1400 audit(1743454295.517:13908): avc: denied { write } for pid=17292 comm="syz.4.4944" path="socket:[52087]" dev="sockfs" ino=52087 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 395.651721][T17299] loop2: detected capacity change from 0 to 4096 [ 395.659774][T17297] 9pnet_fd: Insufficient options for proto=fd [ 395.696728][T17299] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 395.779739][T12440] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.015651][T17311] loop1: detected capacity change from 0 to 256 [ 396.029876][T17311] FAT-fs (loop1): Directory bread(block 64) failed [ 396.036619][T17311] FAT-fs (loop1): Directory bread(block 65) failed [ 396.043432][T17311] FAT-fs (loop1): Directory bread(block 66) failed [ 396.049980][T17311] FAT-fs (loop1): Directory bread(block 67) failed [ 396.056563][T17311] FAT-fs (loop1): Directory bread(block 68) failed [ 396.063220][T17311] FAT-fs (loop1): Directory bread(block 69) failed [ 396.069912][T17311] FAT-fs (loop1): Directory bread(block 70) failed [ 396.076513][T17311] FAT-fs (loop1): Directory bread(block 71) failed [ 396.083131][T17311] FAT-fs (loop1): Directory bread(block 72) failed [ 396.089876][T17311] FAT-fs (loop1): Directory bread(block 73) failed [ 396.144519][T17316] loop2: detected capacity change from 0 to 512 [ 397.019703][T17316] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 397.029925][T17316] EXT4-fs (loop2): orphan cleanup on readonly fs [ 397.036724][T17316] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.4952: invalid indirect mapped block 256 (level 2) [ 397.126193][T17316] EXT4-fs (loop2): 2 truncates cleaned up [ 397.132518][T17316] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 397.226607][T12440] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.358333][T17334] tipc: Enabling of bearer rejected, already enabled [ 397.428496][T17330] Cannot find set identified by id 0 to match [ 397.448648][T17330] Restarting kernel threads ... done. [ 397.583267][T17347] loop1: detected capacity change from 0 to 2048 [ 397.592997][T17347] EXT4-fs: Ignoring removed oldalloc option [ 397.604501][ T29] audit: type=1326 audit(1743454297.607:13909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17346 comm="syz.3.4962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c74d1d169 code=0x7ffc0000 [ 397.632594][ T29] audit: type=1326 audit(1743454297.607:13910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17346 comm="syz.3.4962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c74d1d169 code=0x7ffc0000 [ 397.657139][ T29] audit: type=1326 audit(1743454297.607:13911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17346 comm="syz.3.4962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8c74d1d169 code=0x7ffc0000 [ 397.670826][T17347] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 397.680781][ T29] audit: type=1326 audit(1743454297.607:13912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17346 comm="syz.3.4962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c74d1d169 code=0x7ffc0000 [ 397.680826][ T29] audit: type=1326 audit(1743454297.607:13913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17346 comm="syz.3.4962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c74d1d169 code=0x7ffc0000 [ 397.740296][ T29] audit: type=1326 audit(1743454297.607:13914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17346 comm="syz.3.4962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8c74d1d169 code=0x7ffc0000 [ 397.762020][T17348] 9pnet_fd: Insufficient options for proto=fd [ 397.775309][T17348] loop3: detected capacity change from 0 to 256 [ 397.782180][T17348] msdos: Unknown parameter 'ÿÿÿÿÿÿÿÿ ;µÄÞîå¬AŒ÷\Ò‡CAW‡' [ 397.955827][T17347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 397.964298][T17347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.574193][T11087] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.651848][T17375] loop1: detected capacity change from 0 to 512 [ 398.670954][T17375] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 398.679145][T17375] EXT4-fs (loop1): orphan cleanup on readonly fs [ 398.687143][T17375] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.4968: invalid indirect mapped block 256 (level 2) [ 398.702975][T17375] EXT4-fs (loop1): 2 truncates cleaned up [ 398.710088][T17375] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 398.739160][T11087] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.863068][T17393] loop1: detected capacity change from 0 to 2048 [ 398.872099][T17393] EXT4-fs: Ignoring removed oldalloc option [ 398.899887][T17393] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 399.207031][T17400] tipc: Enabling of bearer rejected, already enabled [ 399.230180][T17393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.249211][T17404] tipc: Enabling of bearer rejected, already enabled [ 399.255310][T17393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.548110][T17419] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.4983'. [ 399.555646][T17417] loop3: detected capacity change from 0 to 512 [ 399.564363][T17417] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 399.584133][T17417] EXT4-fs (loop3): orphan cleanup on readonly fs [ 399.591064][T17417] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.4982: Failed to acquire dquot type 1 [ 399.605212][T17417] EXT4-fs (loop3): 1 truncate cleaned up [ 399.611592][T17417] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 399.635849][T11373] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.662886][T17423] loop3: detected capacity change from 0 to 512 [ 399.669996][T17423] journal_path: Non-blockdev passed as './bus' [ 399.676266][T17423] EXT4-fs: error: could not find journal device path [ 400.078162][T17433] Cannot find set identified by id 0 to match [ 400.108462][T17433] Restarting kernel threads ... done. [ 400.121930][T11087] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.596116][ T29] kauditd_printk_skb: 151 callbacks suppressed [ 400.596133][ T29] audit: type=1326 audit(1743454300.607:14064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17454 comm="syz.3.4996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c74d1d169 code=0x7ffc0000 [ 400.666697][ T29] audit: type=1326 audit(1743454300.637:14065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17454 comm="syz.3.4996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8c74d1d169 code=0x7ffc0000 [ 400.690370][ T29] audit: type=1326 audit(1743454300.637:14066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17454 comm="syz.3.4996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c74d1d169 code=0x7ffc0000 [ 400.714013][ T29] audit: type=1326 audit(1743454300.637:14067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17454 comm="syz.3.4996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c74d1d169 code=0x7ffc0000 [ 400.737865][ T29] audit: type=1326 audit(1743454300.637:14068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17454 comm="syz.3.4996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8c74d1bad0 code=0x7ffc0000 [ 400.761533][ T29] audit: type=1326 audit(1743454300.637:14069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17454 comm="syz.3.4996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8c74d1bad0 code=0x7ffc0000 [ 400.785127][ T29] audit: type=1326 audit(1743454300.637:14070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17454 comm="syz.3.4996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c74d1d169 code=0x7ffc0000 [ 400.808927][ T29] audit: type=1326 audit(1743454300.637:14071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17454 comm="syz.3.4996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c74d1d169 code=0x7ffc0000 [ 400.832560][ T29] audit: type=1326 audit(1743454300.637:14072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17454 comm="syz.3.4996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8c74d1d169 code=0x7ffc0000 [ 400.856210][ T29] audit: type=1326 audit(1743454300.637:14073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17454 comm="syz.3.4996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c74d1d169 code=0x7ffc0000 [ 400.893789][T17459] loop3: detected capacity change from 0 to 8192 [ 400.902410][T17459] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 401.371243][T17471] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 401.423876][T17472] tipc: Enabling of bearer rejected, already enabled [ 401.554124][T17471] SELinux: failed to load policy [ 402.351734][T17496] loop1: detected capacity change from 0 to 1024 [ 402.384779][T17496] EXT4-fs: Ignoring removed nobh option [ 402.390536][T17496] EXT4-fs: inline encryption not supported [ 402.396458][T17496] EXT4-fs: Ignoring removed bh option [ 402.579586][T17496] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 402.787198][T17507] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 402.941337][T17507] EXT4-fs (loop1): Remounting filesystem read-only [ 403.033750][T17510] loop4: detected capacity change from 0 to 128 [ 403.063962][T11087] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.087607][T17510] EXT4-fs: Ignoring removed nobh option [ 403.121869][T17510] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 403.136214][T17510] ext4 filesystem being mounted at /343/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 403.169631][T17515] netlink: 'syz.1.5014': attribute type 39 has an invalid length. [ 403.181222][T12281] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 403.276389][T17523] 9pnet_fd: Insufficient options for proto=fd [ 403.382850][T17533] loop1: detected capacity change from 0 to 2048 [ 403.396923][T17533] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 403.596300][T17546] loop2: detected capacity change from 0 to 4096 [ 403.606974][T17546] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 403.735927][T17553] loop3: detected capacity change from 0 to 8192 [ 403.747679][T17553] syz.3.5025: attempt to access beyond end of device [ 403.747679][T17553] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 403.764630][T17553] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 403.772565][T17553] FAT-fs (loop3): Filesystem has been set read-only [ 403.783294][T17553] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 403.791454][T17553] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 403.843654][T17557] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5026'. [ 404.242063][T17580] loop4: detected capacity change from 0 to 256 [ 404.259747][T17580] FAT-fs (loop4): Directory bread(block 64) failed [ 404.266349][T17580] FAT-fs (loop4): Directory bread(block 65) failed [ 404.272970][T17580] FAT-fs (loop4): Directory bread(block 66) failed [ 404.279598][T17580] FAT-fs (loop4): Directory bread(block 67) failed [ 404.284118][T17582] loop1: detected capacity change from 0 to 256 [ 404.286142][T17580] FAT-fs (loop4): Directory bread(block 68) failed [ 404.299151][T17580] FAT-fs (loop4): Directory bread(block 69) failed [ 404.305714][T17580] FAT-fs (loop4): Directory bread(block 70) failed [ 404.307485][T17582] FAT-fs (loop1): Directory bread(block 64) failed [ 404.312224][T17580] FAT-fs (loop4): Directory bread(block 71) failed [ 404.318829][T17582] FAT-fs (loop1): Directory bread(block 65) failed [ 404.325299][T17580] FAT-fs (loop4): Directory bread(block 72) failed [ 404.331771][T17582] FAT-fs (loop1): Directory bread(block 66) failed [ 404.338286][T17580] FAT-fs (loop4): Directory bread(block 73) failed [ 404.351482][T17582] FAT-fs (loop1): Directory bread(block 67) failed [ 404.358118][T17582] FAT-fs (loop1): Directory bread(block 68) failed [ 404.364665][T17582] FAT-fs (loop1): Directory bread(block 69) failed [ 404.371433][T17582] FAT-fs (loop1): Directory bread(block 70) failed [ 404.378188][T17582] FAT-fs (loop1): Directory bread(block 71) failed [ 404.384819][T17582] FAT-fs (loop1): Directory bread(block 72) failed [ 404.391435][T17582] FAT-fs (loop1): Directory bread(block 73) failed [ 404.552854][T17591] tipc: Enabling of bearer rejected, already enabled [ 404.700723][T17598] FAULT_INJECTION: forcing a failure. [ 404.700723][T17598] name failslab, interval 1, probability 0, space 0, times 0 [ 404.713464][T17598] CPU: 1 UID: 0 PID: 17598 Comm: syz.0.5039 Not tainted 6.14.0-syzkaller-10892-g4e82c87058f4 #0 PREEMPT(voluntary) [ 404.713498][T17598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 404.713514][T17598] Call Trace: [ 404.713522][T17598] [ 404.713531][T17598] dump_stack_lvl+0xf6/0x150 [ 404.713560][T17598] dump_stack+0x15/0x1a [ 404.713583][T17598] should_fail_ex+0x261/0x270 [ 404.713607][T17598] should_failslab+0x8f/0xb0 [ 404.713688][T17598] __kmalloc_cache_node_noprof+0x58/0x340 [ 404.713721][T17598] ? __get_vm_area_node+0xfb/0x1c0 [ 404.713747][T17598] __get_vm_area_node+0xfb/0x1c0 [ 404.713773][T17598] __vmalloc_node_range_noprof+0x285/0xe80 [ 404.713801][T17598] ? ip_set_sockfn_get+0x126/0x6d0 [ 404.713913][T17598] ? __rcu_read_unlock+0x4e/0x70 [ 404.713942][T17598] ? __rcu_read_unlock+0x4e/0x70 [ 404.714001][T17598] ? selinux_capable+0x1f9/0x260 [ 404.714036][T17598] ? ip_set_sockfn_get+0x126/0x6d0 [ 404.714105][T17598] vmalloc_noprof+0x5e/0x70 [ 404.714127][T17598] ? ip_set_sockfn_get+0x126/0x6d0 [ 404.714152][T17598] ip_set_sockfn_get+0x126/0x6d0 [ 404.714239][T17598] nf_getsockopt+0x18c/0x1b0 [ 404.714276][T17598] ip_getsockopt+0x12e/0x170 [ 404.714309][T17598] raw_getsockopt+0xac/0x190 [ 404.714414][T17598] sock_common_getsockopt+0x5b/0x70 [ 404.714448][T17598] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 404.714477][T17598] do_sock_getsockopt+0x1fc/0x290 [ 404.714553][T17598] __x64_sys_getsockopt+0x191/0x210 [ 404.714598][T17598] x64_sys_call+0x128f/0x2e10 [ 404.714671][T17598] do_syscall_64+0xc9/0x1c0 [ 404.714696][T17598] ? clear_bhb_loop+0x25/0x80 [ 404.714722][T17598] ? clear_bhb_loop+0x25/0x80 [ 404.714748][T17598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.714853][T17598] RIP: 0033:0x7f7bbd59d169 [ 404.714867][T17598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 404.714883][T17598] RSP: 002b:00007f7bbbbff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 404.714967][T17598] RAX: ffffffffffffffda RBX: 00007f7bbd7b5fa0 RCX: 00007f7bbd59d169 [ 404.715054][T17598] RDX: 0000000000000053 RSI: 0000000000000000 RDI: 0000000000000004 [ 404.715070][T17598] RBP: 00007f7bbbbff090 R08: 0000200000000040 R09: 0000000000000000 [ 404.715094][T17598] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 404.715165][T17598] R13: 0000000000000000 R14: 00007f7bbd7b5fa0 R15: 00007ffd36e30988 [ 404.715188][T17598] [ 404.958455][T17598] syz.0.5039: vmalloc error: size 40, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0 [ 404.972462][T17598] CPU: 1 UID: 0 PID: 17598 Comm: syz.0.5039 Not tainted 6.14.0-syzkaller-10892-g4e82c87058f4 #0 PREEMPT(voluntary) [ 404.972496][T17598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 404.972531][T17598] Call Trace: [ 404.972539][T17598] [ 404.972582][T17598] dump_stack_lvl+0xf6/0x150 [ 404.972605][T17598] dump_stack+0x15/0x1a [ 404.972621][T17598] warn_alloc+0x145/0x1b0 [ 404.972646][T17598] __vmalloc_node_range_noprof+0x2aa/0xe80 [ 404.972674][T17598] ? __rcu_read_unlock+0x4e/0x70 [ 404.972787][T17598] ? __rcu_read_unlock+0x4e/0x70 [ 404.972816][T17598] ? selinux_capable+0x1f9/0x260 [ 404.972843][T17598] ? ip_set_sockfn_get+0x126/0x6d0 [ 404.972890][T17598] vmalloc_noprof+0x5e/0x70 [ 404.972916][T17598] ? ip_set_sockfn_get+0x126/0x6d0 [ 404.972949][T17598] ip_set_sockfn_get+0x126/0x6d0 [ 404.972977][T17598] nf_getsockopt+0x18c/0x1b0 [ 404.973072][T17598] ip_getsockopt+0x12e/0x170 [ 404.973106][T17598] raw_getsockopt+0xac/0x190 [ 404.973181][T17598] sock_common_getsockopt+0x5b/0x70 [ 404.973212][T17598] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 404.973246][T17598] do_sock_getsockopt+0x1fc/0x290 [ 404.973342][T17598] __x64_sys_getsockopt+0x191/0x210 [ 404.973442][T17598] x64_sys_call+0x128f/0x2e10 [ 404.973467][T17598] do_syscall_64+0xc9/0x1c0 [ 404.973491][T17598] ? clear_bhb_loop+0x25/0x80 [ 404.973537][T17598] ? clear_bhb_loop+0x25/0x80 [ 404.973562][T17598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.973586][T17598] RIP: 0033:0x7f7bbd59d169 [ 404.973605][T17598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 404.973624][T17598] RSP: 002b:00007f7bbbbff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 404.973642][T17598] RAX: ffffffffffffffda RBX: 00007f7bbd7b5fa0 RCX: 00007f7bbd59d169 [ 404.973654][T17598] RDX: 0000000000000053 RSI: 0000000000000000 RDI: 0000000000000004 [ 404.973700][T17598] RBP: 00007f7bbbbff090 R08: 0000200000000040 R09: 0000000000000000 [ 404.973711][T17598] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 404.973722][T17598] R13: 0000000000000000 R14: 00007f7bbd7b5fa0 R15: 00007ffd36e30988 [ 404.973868][T17598] [ 404.973934][T17598] Mem-Info: [ 405.196764][T17598] active_anon:6309 inactive_anon:10 isolated_anon:0 [ 405.196764][T17598] active_file:14611 inactive_file:2762 isolated_file:0 [ 405.196764][T17598] unevictable:0 dirty:262 writeback:0 [ 405.196764][T17598] slab_reclaimable:3337 slab_unreclaimable:41231 [ 405.196764][T17598] mapped:31321 shmem:3215 pagetables:866 [ 405.196764][T17598] sec_pagetables:0 bounce:0 [ 405.196764][T17598] kernel_misc_reclaimable:0 [ 405.196764][T17598] free:1869712 free_pcp:3768 free_cma:0 [ 405.241967][T17598] Node 0 active_anon:25236kB inactive_anon:40kB active_file:58444kB inactive_file:11048kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:125284kB dirty:1048kB writeback:0kB shmem:12860kB writeback_tmp:0kB kernel_stack:4176kB pagetables:3464kB sec_pagetables:0kB all_unreclaimable? no [ 405.270055][T17598] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 405.297110][T17598] lowmem_reserve[]: 0 2884 7862 7862 [ 405.302505][T17598] Node 0 DMA32 free:2949876kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953408kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:0kB free_cma:0kB [ 405.330894][T17598] lowmem_reserve[]: 0 0 4978 4978 [ 405.336090][T17598] Node 0 Normal free:4513612kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:25236kB inactive_anon:40kB active_file:58444kB inactive_file:11048kB unevictable:0kB writepending:1048kB present:5242880kB managed:5098248kB mlocked:0kB bounce:0kB free_pcp:11508kB local_pcp:5888kB free_cma:0kB [ 405.366437][T17598] lowmem_reserve[]: 0 0 0 0 [ 405.371029][T17598] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 405.383850][T17598] Node 0 DMA32: 3*4kB (M) 3*8kB (M) 3*16kB (M) 3*32kB (M) 5*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949876kB [ 405.400151][T17598] Node 0 Normal: 464*4kB (UME) 473*8kB (UME) 658*16kB (UME) 795*32kB (UME) 685*64kB (UME) 910*128kB (UME) 629*256kB (UM) 605*512kB (UME) 495*1024kB (UME) 138*2048kB (UM) 745*4096kB (UM) = 4513736kB [ 405.419673][T17598] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 405.429038][T17598] 20602 total pagecache pages [ 405.433702][T17598] 22 pages in swap cache [ 405.437946][T17598] Free swap = 124460kB [ 405.442151][T17598] Total swap = 124996kB [ 405.446348][T17598] 2097051 pages RAM [ 405.450295][T17598] 0 pages HighMem/MovableOnly [ 405.454969][T17598] 80297 pages reserved [ 405.522929][T17608] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 405.532684][T17608] SELinux: failed to load policy [ 405.610396][T17612] 9pnet_fd: Insufficient options for proto=fd [ 405.625549][T17625] loop2: detected capacity change from 0 to 256 [ 405.637289][ T29] kauditd_printk_skb: 89 callbacks suppressed [ 405.637308][ T29] audit: type=1326 audit(1743454305.647:14163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17621 comm="syz.0.5049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bbd59d169 code=0x7ffc0000 [ 405.669258][T17625] FAT-fs (loop2): Directory bread(block 64) failed [ 405.675911][T17625] FAT-fs (loop2): Directory bread(block 65) failed [ 405.682786][T17625] FAT-fs (loop2): Directory bread(block 66) failed [ 405.703035][T17625] FAT-fs (loop2): Directory bread(block 67) failed [ 405.709708][ T29] audit: type=1326 audit(1743454305.647:14164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17621 comm="syz.0.5049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7bbd59d169 code=0x7ffc0000 [ 405.733325][ T29] audit: type=1326 audit(1743454305.647:14165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17621 comm="syz.0.5049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bbd59d169 code=0x7ffc0000 [ 405.757109][ T29] audit: type=1326 audit(1743454305.647:14166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17621 comm="syz.0.5049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f7bbd59d169 code=0x7ffc0000 [ 405.780729][ T29] audit: type=1326 audit(1743454305.647:14167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17621 comm="syz.0.5049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bbd59d169 code=0x7ffc0000 [ 405.794578][T17625] FAT-fs (loop2): Directory bread(block 68) failed [ 405.804311][ T29] audit: type=1326 audit(1743454305.647:14168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17621 comm="syz.0.5049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7bbd59d169 code=0x7ffc0000 [ 405.835012][ T29] audit: type=1326 audit(1743454305.647:14169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17621 comm="syz.0.5049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bbd59d169 code=0x7ffc0000 [ 405.853362][T17625] FAT-fs (loop2): Directory bread(block 69) failed [ 405.858575][ T29] audit: type=1326 audit(1743454305.647:14170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17621 comm="syz.0.5049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f7bbd59d169 code=0x7ffc0000 [ 405.879820][T17625] FAT-fs (loop2): Directory bread(block 70) failed [ 405.888540][ T29] audit: type=1326 audit(1743454305.647:14171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17621 comm="syz.0.5049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bbd59d169 code=0x7ffc0000 [ 405.918717][ T29] audit: type=1326 audit(1743454305.647:14172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17621 comm="syz.0.5049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f7bbd59d169 code=0x7ffc0000 [ 405.919144][T17625] FAT-fs (loop2): Directory bread(block 71) failed [ 405.984654][T17625] FAT-fs (loop2): Directory bread(block 72) failed [ 405.991425][T17625] FAT-fs (loop2): Directory bread(block 73) failed [ 406.021726][T17635] netlink: 'syz.0.5054': attribute type 4 has an invalid length. [ 406.068571][T17635] netlink: 'syz.0.5054': attribute type 4 has an invalid length. [ 406.083904][T17626] tipc: Enabling of bearer rejected, already enabled [ 406.120843][T17637] loop4: detected capacity change from 0 to 256 [ 406.134448][T17637] FAT-fs (loop4): Directory bread(block 64) failed [ 406.141083][T17637] FAT-fs (loop4): Directory bread(block 65) failed [ 406.147700][T17637] FAT-fs (loop4): Directory bread(block 66) failed [ 406.154446][T17637] FAT-fs (loop4): Directory bread(block 67) failed [ 406.161188][T17637] FAT-fs (loop4): Directory bread(block 68) failed [ 406.167758][T17637] FAT-fs (loop4): Directory bread(block 69) failed [ 406.174372][T17637] FAT-fs (loop4): Directory bread(block 70) failed [ 406.180968][T17637] FAT-fs (loop4): Directory bread(block 71) failed [ 406.187581][T17637] FAT-fs (loop4): Directory bread(block 72) failed [ 406.194134][T17637] FAT-fs (loop4): Directory bread(block 73) failed [ 406.389410][T17645] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 406.408583][T17645] SELinux: failed to load policy [ 406.710308][T17657] program syz.0.5060 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 406.822761][ T7102] Process accounting resumed [ 406.871561][T17670] loop1: detected capacity change from 0 to 128 [ 406.890393][T17670] EXT4-fs: Ignoring removed nobh option [ 406.903638][T17674] loop3: detected capacity change from 0 to 2048 [ 406.925499][T17670] ext4 filesystem being mounted at /482/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 407.047838][T17684] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 407.100456][T17684] SELinux: failed to load policy [ 407.308471][T17695] loop1: detected capacity change from 0 to 512 [ 407.325827][T17695] journal_path: Non-blockdev passed as './bus' [ 407.332192][T17695] EXT4-fs: error: could not find journal device path [ 407.496977][T17705] Cannot find set identified by id 0 to match [ 407.515225][T17705] Restarting kernel threads ... done. [ 407.561045][T17708] loop1: detected capacity change from 0 to 256 [ 407.577203][T17708] FAT-fs (loop1): Directory bread(block 64) failed [ 407.584130][T17708] FAT-fs (loop1): Directory bread(block 65) failed [ 407.590863][T17708] FAT-fs (loop1): Directory bread(block 66) failed [ 407.597460][T17708] FAT-fs (loop1): Directory bread(block 67) failed [ 407.604023][T17708] FAT-fs (loop1): Directory bread(block 68) failed [ 407.610567][T17708] FAT-fs (loop1): Directory bread(block 69) failed [ 407.617173][T17708] FAT-fs (loop1): Directory bread(block 70) failed [ 407.623705][T17708] FAT-fs (loop1): Directory bread(block 71) failed [ 407.630291][T17708] FAT-fs (loop1): Directory bread(block 72) failed [ 407.636907][T17708] FAT-fs (loop1): Directory bread(block 73) failed [ 407.666107][T17709] loop2: detected capacity change from 0 to 128 [ 408.661799][T17728] loop1: detected capacity change from 0 to 256 [ 408.744540][T17728] FAT-fs (loop1): Directory bread(block 64) failed [ 408.805391][T17728] FAT-fs (loop1): Directory bread(block 65) failed [ 408.923420][T17728] FAT-fs (loop1): Directory bread(block 66) failed [ 408.930172][T17728] FAT-fs (loop1): Directory bread(block 67) failed [ 408.936779][T17728] FAT-fs (loop1): Directory bread(block 68) failed [ 408.943471][T17728] FAT-fs (loop1): Directory bread(block 69) failed [ 408.950126][T17728] FAT-fs (loop1): Directory bread(block 70) failed [ 408.956844][T17728] FAT-fs (loop1): Directory bread(block 71) failed [ 408.963550][T17728] FAT-fs (loop1): Directory bread(block 72) failed [ 408.970259][T17728] FAT-fs (loop1): Directory bread(block 73) failed [ 410.354033][T17750] loop3: detected capacity change from 0 to 128 [ 410.393104][T17750] EXT4-fs: Ignoring removed nobh option [ 410.501361][T17750] EXT4-fs mount: 6 callbacks suppressed [ 410.501382][T17750] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 410.580146][T17750] ext4 filesystem being mounted at /430/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 410.709414][T11373] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 410.844991][T17756] tipc: Enabling of bearer rejected, already enabled [ 410.951832][ T7085] Process accounting resumed [ 411.093542][T17762] set match dimension is over the limit! [ 411.130032][T17762] Restarting kernel threads ... done. [ 411.244400][T17767] loop4: detected capacity change from 0 to 2048 [ 411.312012][T17767] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 411.347197][ T29] kauditd_printk_skb: 148 callbacks suppressed [ 411.347217][ T29] audit: type=1326 audit(1743454311.061:14321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17773 comm="syz.3.5100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c74d1d169 code=0x7ffc0000 [ 411.410317][ T29] audit: type=1326 audit(1743454311.070:14322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17773 comm="syz.3.5100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8c74d1d169 code=0x7ffc0000 [ 411.434085][ T29] audit: type=1326 audit(1743454311.070:14323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17773 comm="syz.3.5100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c74d1d169 code=0x7ffc0000 [ 411.457810][ T29] audit: type=1326 audit(1743454311.070:14324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17773 comm="syz.3.5100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f8c74d1d169 code=0x7ffc0000 [ 411.481482][ T29] audit: type=1326 audit(1743454311.070:14325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17773 comm="syz.3.5100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c74d1d169 code=0x7ffc0000 [ 411.505271][ T29] audit: type=1326 audit(1743454311.070:14326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17773 comm="syz.3.5100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8c74d1d169 code=0x7ffc0000 [ 411.528977][ T29] audit: type=1326 audit(1743454311.070:14327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17773 comm="syz.3.5100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c74d1d169 code=0x7ffc0000 [ 411.552753][ T29] audit: type=1326 audit(1743454311.070:14328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17773 comm="syz.3.5100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f8c74d1d169 code=0x7ffc0000 [ 411.576291][ T29] audit: type=1326 audit(1743454311.070:14329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17773 comm="syz.3.5100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c74d1d169 code=0x7ffc0000 [ 411.599916][ T29] audit: type=1326 audit(1743454311.070:14330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17773 comm="syz.3.5100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f8c74d1d169 code=0x7ffc0000 [ 411.769430][T17791] loop1: detected capacity change from 0 to 512 [ 411.793286][T17791] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 411.793476][T17791] EXT4-fs (loop1): orphan cleanup on readonly fs [ 411.793811][T17791] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.5102: invalid indirect mapped block 256 (level 2) [ 411.802647][ T3380] Process accounting resumed [ 411.835701][T17791] EXT4-fs (loop1): 2 truncates cleaned up [ 412.020259][T17791] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 412.253338][T17797] loop2: detected capacity change from 0 to 128 [ 412.260012][T17797] EXT4-fs: Ignoring removed nobh option [ 412.282825][T11087] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.299453][T17797] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 412.317022][T17797] ext4 filesystem being mounted at /341/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 412.331767][T12281] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.346787][T17803] loop1: detected capacity change from 0 to 512 [ 412.355028][T17803] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 412.363262][T17803] EXT4-fs (loop1): orphan cleanup on readonly fs [ 412.370045][T17803] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.5107: invalid indirect mapped block 256 (level 2) [ 412.383828][T17803] EXT4-fs (loop1): 2 truncates cleaned up [ 412.392136][T17803] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 412.419308][T11087] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.740122][T12440] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 413.471045][T17813] loop3: detected capacity change from 0 to 512 [ 413.511299][T17813] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 413.526910][T17813] EXT4-fs (loop3): orphan cleanup on readonly fs [ 413.543554][T17813] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.5111: invalid indirect mapped block 256 (level 2) [ 413.561669][T17816] 9pnet_fd: Insufficient options for proto=fd [ 413.570258][T17813] EXT4-fs (loop3): 2 truncates cleaned up [ 413.576393][T17813] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 413.695905][T17819] Cannot find set identified by id 0 to match [ 413.708594][T11373] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.740156][T17819] Restarting kernel threads ... done. [ 413.906511][T17828] loop1: detected capacity change from 0 to 512 [ 413.922325][T17828] journal_path: Non-blockdev passed as './bus' [ 413.928596][T17828] EXT4-fs: error: could not find journal device path [ 414.108966][T17836] loop1: detected capacity change from 0 to 2048 [ 414.127268][T17836] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 414.912528][T17846] loop2: detected capacity change from 0 to 512 [ 415.079533][T17846] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 415.089847][T17846] EXT4-fs (loop2): orphan cleanup on readonly fs [ 415.090759][T11087] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.108025][T17846] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.5120: invalid indirect mapped block 256 (level 2) [ 415.130251][T17846] EXT4-fs (loop2): 2 truncates cleaned up [ 415.139624][T17846] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 415.171768][T12440] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.220921][T17854] loop2: detected capacity change from 0 to 512 [ 415.228964][T17854] journal_path: Non-blockdev passed as './bus' [ 415.235158][T17854] EXT4-fs: error: could not find journal device path [ 415.511066][T17866] Cannot find set identified by id 0 to match [ 415.517650][T17866] Restarting kernel threads ... done. [ 415.872362][T17875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.881149][T17875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.344268][T17880] loop2: detected capacity change from 0 to 256 [ 416.358555][T17880] FAT-fs (loop2): Directory bread(block 64) failed [ 416.365174][T17880] FAT-fs (loop2): Directory bread(block 65) failed [ 416.371808][T17880] FAT-fs (loop2): Directory bread(block 66) failed [ 416.378323][T17880] FAT-fs (loop2): Directory bread(block 67) failed [ 416.385077][T17880] FAT-fs (loop2): Directory bread(block 68) failed [ 416.391690][T17880] FAT-fs (loop2): Directory bread(block 69) failed [ 416.398326][T17880] FAT-fs (loop2): Directory bread(block 70) failed [ 416.404896][T17880] FAT-fs (loop2): Directory bread(block 71) failed [ 416.411427][T17880] FAT-fs (loop2): Directory bread(block 72) failed [ 416.418027][T17880] FAT-fs (loop2): Directory bread(block 73) failed [ 416.586819][T17890] SELinux: ebitmap: truncated map [ 416.593555][T17890] SELinux: failed to load policy [ 417.082459][T17898] Cannot find set identified by id 0 to match [ 417.089113][T17898] Restarting kernel threads ... done. [ 417.308533][T17907] loop3: detected capacity change from 0 to 2048 [ 417.336458][T17907] EXT4-fs: Ignoring removed oldalloc option [ 417.447074][T17907] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 417.462865][ T29] kauditd_printk_skb: 102 callbacks suppressed [ 417.462881][ T29] audit: type=1326 audit(1743454316.795:14433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17906 comm="syz.3.5142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c74d1d169 code=0x7ffc0000 [ 417.492693][ T29] audit: type=1326 audit(1743454316.795:14434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17906 comm="syz.3.5142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8c74d1bad0 code=0x7ffc0000 [ 417.535248][T17913] loop1: detected capacity change from 0 to 512 [ 417.544576][T17913] journal_path: Non-blockdev passed as './bus' [ 417.550817][T17913] EXT4-fs: error: could not find journal device path [ 417.761862][T17911] tipc: Enabling of bearer rejected, already enabled [ 417.837255][ T29] audit: type=1326 audit(1743454316.795:14435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17906 comm="syz.3.5142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c74d1d169 code=0x7ffc0000 [ 417.861000][ T29] audit: type=1326 audit(1743454316.795:14436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17906 comm="syz.3.5142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f8c74d1d169 code=0x7ffc0000 [ 417.884741][ T29] audit: type=1326 audit(1743454316.795:14437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17906 comm="syz.3.5142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c74d1d169 code=0x7ffc0000 [ 417.908406][ T29] audit: type=1326 audit(1743454316.795:14438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17906 comm="syz.3.5142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8c74d1d169 code=0x7ffc0000 [ 417.931937][ T29] audit: type=1326 audit(1743454316.795:14439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17906 comm="syz.3.5142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c74d1d169 code=0x7ffc0000 [ 417.955674][ T29] audit: type=1326 audit(1743454316.795:14440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17906 comm="syz.3.5142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8c74d1d169 code=0x7ffc0000 [ 417.979252][ T29] audit: type=1326 audit(1743454317.141:14441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17906 comm="syz.3.5142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c74d1d169 code=0x7ffc0000 [ 418.002959][ T29] audit: type=1326 audit(1743454317.141:14442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17906 comm="syz.3.5142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c74d1d169 code=0x7ffc0000 [ 418.076570][T17931] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98 [ 418.103286][T17907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.123588][T17907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.135239][T17928] netlink: 100 bytes leftover after parsing attributes in process `syz.1.5147'. [ 418.154109][T17928] loop1: detected capacity change from 0 to 512 [ 418.200213][T17928] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 418.212861][T17928] ext4 filesystem being mounted at /504/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 418.241562][T11087] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.320682][T17938] Cannot find set identified by id 0 to match [ 418.327323][T17938] Restarting kernel threads ... done. [ 418.359612][T17949] netlink: 'syz.4.5153': attribute type 29 has an invalid length. [ 418.369701][T17949] netlink: 'syz.4.5153': attribute type 29 has an invalid length. [ 418.378250][T17950] netlink: 500 bytes leftover after parsing attributes in process `syz.4.5153'. [ 418.975411][T11373] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.984630][T17957] loop4: detected capacity change from 0 to 2048 [ 419.012682][T17957] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 419.247276][T17968] loop3: detected capacity change from 0 to 128 [ 419.270500][T17968] EXT4-fs: Ignoring removed nobh option [ 419.279263][T17968] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 419.325785][T17968] ext4 filesystem being mounted at /442/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 419.385177][T11373] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 419.527460][T17974] loop1: detected capacity change from 0 to 256 [ 419.543527][T17974] FAT-fs (loop1): Directory bread(block 64) failed [ 419.550156][T17974] FAT-fs (loop1): Directory bread(block 65) failed [ 419.556734][T17974] FAT-fs (loop1): Directory bread(block 66) failed [ 419.563256][T17974] FAT-fs (loop1): Directory bread(block 67) failed [ 419.569894][T17974] FAT-fs (loop1): Directory bread(block 68) failed [ 419.576423][T17974] FAT-fs (loop1): Directory bread(block 69) failed [ 419.582983][T17974] FAT-fs (loop1): Directory bread(block 70) failed [ 419.589591][T17974] FAT-fs (loop1): Directory bread(block 71) failed [ 419.596134][T17974] FAT-fs (loop1): Directory bread(block 72) failed [ 419.602690][T17974] FAT-fs (loop1): Directory bread(block 73) failed [ 419.862823][T12281] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.886583][ T3379] Process accounting resumed [ 419.973835][T17989] loop4: detected capacity change from 0 to 512 [ 419.980458][T17989] journal_path: Non-blockdev passed as './bus' [ 419.986765][T17989] EXT4-fs: error: could not find journal device path [ 420.028999][T17991] SELinux: ebitmap: truncated map [ 420.034676][T17991] SELinux: failed to load policy [ 420.471131][ T3379] Process accounting resumed [ 420.502491][T17998] loop1: detected capacity change from 0 to 2048 [ 420.509300][T17998] EXT4-fs: Ignoring removed oldalloc option [ 420.534075][T17998] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 420.599244][T18008] loop3: detected capacity change from 0 to 2048 [ 420.607769][ T3379] Process accounting resumed [ 420.619030][T18008] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 420.702489][T18018] siw: device registration error -23 [ 420.747149][T17998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.756126][T17998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 421.186858][T18039] siw: device registration error -23 [ 421.232448][T18041] loop4: detected capacity change from 0 to 512 [ 421.239161][T18041] journal_path: Non-blockdev passed as './bus' [ 421.245493][T18041] EXT4-fs: error: could not find journal device path [ 421.275274][T18043] loop4: detected capacity change from 0 to 1024 [ 421.282229][T18043] EXT4-fs: Ignoring removed nobh option [ 421.288099][T18043] EXT4-fs: inline encryption not supported [ 421.293935][T18043] EXT4-fs: Ignoring removed bh option [ 421.312890][T18043] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 421.355576][T11087] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.369492][T18043] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 421.391416][T18043] EXT4-fs (loop4): Remounting filesystem read-only [ 421.413499][T12281] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.461639][T18053] loop1: detected capacity change from 0 to 512 [ 421.485107][T18053] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 421.498444][T18053] ext4 filesystem being mounted at /511/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 421.517103][T18053] EXT4-fs error (device loop1): ext4_do_update_inode:5194: inode #2: comm syz.1.5187: corrupted inode contents [ 421.529316][T18056] loop4: detected capacity change from 0 to 512 [ 421.539615][T18056] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 421.548036][T18053] EXT4-fs error (device loop1): ext4_dirty_inode:6086: inode #2: comm syz.1.5187: mark_inode_dirty error [ 421.565386][T18053] EXT4-fs error (device loop1): ext4_do_update_inode:5194: inode #2: comm syz.1.5187: corrupted inode contents [ 421.577915][T18053] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #2: comm syz.1.5187: mark_inode_dirty error [ 421.582538][T11373] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.658397][T18059] loop2: detected capacity change from 0 to 2048 [ 421.681873][T11087] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.707866][T18059] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 421.743176][T18071] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5192'. [ 421.792021][T18076] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 421.798573][T18076] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 421.806051][T18076] vhci_hcd vhci_hcd.0: Device attached [ 421.813094][T18076] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(8) [ 421.819639][T18076] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 421.827250][T18076] vhci_hcd vhci_hcd.0: Device attached [ 421.834070][T18076] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 421.844172][T18076] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(12) [ 421.850859][T18076] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 421.858365][T18076] vhci_hcd vhci_hcd.0: Device attached [ 421.914366][T18076] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(14) [ 421.921009][T18076] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 421.928735][T18076] vhci_hcd vhci_hcd.0: Device attached [ 421.945928][T18076] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(16) [ 421.952575][T18076] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 421.960513][T18076] vhci_hcd vhci_hcd.0: Device attached [ 421.987122][T18076] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 421.995889][T18076] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 422.004306][ T3379] vhci_hcd: vhci_device speed not set [ 422.004366][T18076] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 422.023089][T18080] usbip_core: unknown command [ 422.027845][T18080] vhci_hcd: unknown pdu 2937655338 [ 422.033026][T18080] usbip_core: unknown command [ 422.040275][T18077] vhci_hcd: connection closed [ 422.040326][T18088] vhci_hcd: connection closed [ 422.045268][T18085] vhci_hcd: connection closed [ 422.045603][T18082] vhci_hcd: connection closed [ 422.050294][T12004] vhci_hcd: stop threads [ 422.063705][T12004] vhci_hcd: release socket [ 422.068148][T12004] vhci_hcd: disconnect device [ 422.073378][T12004] vhci_hcd: stop threads [ 422.077644][T12004] vhci_hcd: release socket [ 422.082137][T12004] vhci_hcd: disconnect device [ 422.087328][ T3379] usb 3-1: new full-speed USB device number 2 using vhci_hcd [ 422.094894][ T3379] usb 3-1: enqueue for inactive port 0 [ 422.101205][T12004] vhci_hcd: stop threads [ 422.105496][T12004] vhci_hcd: release socket [ 422.109961][T12004] vhci_hcd: disconnect device [ 422.110626][ T3379] usb 3-1: enqueue for inactive port 0 [ 422.115137][T12004] vhci_hcd: stop threads [ 422.124513][T12004] vhci_hcd: release socket [ 422.129038][T12004] vhci_hcd: disconnect device [ 422.133546][ T3379] usb 3-1: enqueue for inactive port 0 [ 422.134381][T12004] vhci_hcd: stop threads [ 422.143516][T12004] vhci_hcd: release socket [ 422.147963][T12004] vhci_hcd: disconnect device [ 422.207341][ T3379] vhci_hcd: vhci_device speed not set [ 422.742275][T12440] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.910527][T18107] loop1: detected capacity change from 0 to 512 [ 422.928372][T18107] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 422.944302][T18110] SELinux: ebitmap: truncated map [ 422.945495][T18107] ext4 filesystem being mounted at /515/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 422.951357][T18110] SELinux: failed to load policy [ 422.965152][T18107] EXT4-fs error (device loop1): ext4_do_update_inode:5194: inode #2: comm syz.1.5202: corrupted inode contents [ 422.977792][T18107] EXT4-fs error (device loop1): ext4_dirty_inode:6086: inode #2: comm syz.1.5202: mark_inode_dirty error [ 422.989431][T18107] EXT4-fs error (device loop1): ext4_do_update_inode:5194: inode #2: comm syz.1.5202: corrupted inode contents [ 423.002214][T18107] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #2: comm syz.1.5202: mark_inode_dirty error [ 423.044882][T18117] FAULT_INJECTION: forcing a failure. [ 423.044882][T18117] name failslab, interval 1, probability 0, space 0, times 0 [ 423.057692][T18117] CPU: 1 UID: 0 PID: 18117 Comm: syz.2.5205 Not tainted 6.14.0-syzkaller-10892-g4e82c87058f4 #0 PREEMPT(voluntary) [ 423.057720][T18117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 423.057738][T18117] Call Trace: [ 423.057746][T18117] [ 423.057756][T18117] dump_stack_lvl+0xf6/0x150 [ 423.057784][T18117] dump_stack+0x15/0x1a [ 423.057805][T18117] should_fail_ex+0x261/0x270 [ 423.057830][T18117] should_failslab+0x8f/0xb0 [ 423.057866][T18117] kmem_cache_alloc_noprof+0x59/0x340 [ 423.057954][T18117] ? sk_prot_alloc+0x41/0x190 [ 423.057996][T18117] sk_prot_alloc+0x41/0x190 [ 423.058035][T18117] sk_alloc+0x33/0x360 [ 423.058149][T18117] ? inet_create+0x39c/0x750 [ 423.058232][T18117] inet_create+0x3b8/0x750 [ 423.058288][T18117] __sock_create+0x2e9/0x5a0 [ 423.058317][T18117] sock_create_kern+0x38/0x50 [ 423.058348][T18117] udp_sock_create4+0x6c/0x2a0 [ 423.058448][T18117] rxrpc_lookup_local+0x846/0xcb0 [ 423.058490][T18117] rxrpc_sendmsg+0x344/0x520 [ 423.058620][T18117] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 423.058646][T18117] __sock_sendmsg+0x140/0x180 [ 423.058675][T18117] ____sys_sendmsg+0x350/0x4e0 [ 423.058782][T18117] __sys_sendmsg+0x1a0/0x240 [ 423.058817][T18117] __x64_sys_sendmsg+0x46/0x50 [ 423.058834][T18117] x64_sys_call+0x26f3/0x2e10 [ 423.058855][T18117] do_syscall_64+0xc9/0x1c0 [ 423.058875][T18117] ? clear_bhb_loop+0x25/0x80 [ 423.058980][T18117] ? clear_bhb_loop+0x25/0x80 [ 423.059006][T18117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.059031][T18117] RIP: 0033:0x7f58e69ad169 [ 423.059048][T18117] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 423.059113][T18117] RSP: 002b:00007f58e500f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 423.059144][T18117] RAX: ffffffffffffffda RBX: 00007f58e6bc5fa0 RCX: 00007f58e69ad169 [ 423.059159][T18117] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000005 [ 423.059174][T18117] RBP: 00007f58e500f090 R08: 0000000000000000 R09: 0000000000000000 [ 423.059186][T18117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 423.059223][T18117] R13: 0000000000000000 R14: 00007f58e6bc5fa0 R15: 00007fff171ba428 [ 423.059244][T18117] [ 423.061459][T11087] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.312709][T18127] loop1: detected capacity change from 0 to 256 [ 423.343776][T18127] FAT-fs (loop1): Directory bread(block 64) failed [ 423.350426][T18127] FAT-fs (loop1): Directory bread(block 65) failed [ 423.357055][T18127] FAT-fs (loop1): Directory bread(block 66) failed [ 423.361479][T18129] loop3: detected capacity change from 0 to 256 [ 423.363714][T18127] FAT-fs (loop1): Directory bread(block 67) failed [ 423.376462][T18127] FAT-fs (loop1): Directory bread(block 68) failed [ 423.382997][T18127] FAT-fs (loop1): Directory bread(block 69) failed [ 423.383719][T18129] FAT-fs (loop3): Directory bread(block 64) failed [ 423.389548][T18127] FAT-fs (loop1): Directory bread(block 70) failed [ 423.399507][T18129] FAT-fs (loop3): Directory bread(block 65) failed [ 423.402538][T18127] FAT-fs (loop1): Directory bread(block 71) failed [ 423.409236][T18129] FAT-fs (loop3): Directory bread(block 66) failed [ 423.415698][T18127] FAT-fs (loop1): Directory bread(block 72) failed [ 423.428865][T18127] FAT-fs (loop1): Directory bread(block 73) failed [ 423.439598][ T29] kauditd_printk_skb: 182 callbacks suppressed [ 423.439692][ T29] audit: type=1326 audit(1743454322.379:14625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18130 comm="syz.2.5211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58e69ad169 code=0x7ffc0000 [ 423.444305][T18129] FAT-fs (loop3): Directory bread(block 67) failed [ 423.445901][ T29] audit: type=1326 audit(1743454322.379:14626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18130 comm="syz.2.5211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58e69ad169 code=0x7ffc0000 [ 423.472032][T18129] FAT-fs (loop3): Directory bread(block 68) failed [ 423.514363][ T29] audit: type=1326 audit(1743454322.417:14627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18130 comm="syz.2.5211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f58e69ad169 code=0x7ffc0000 [ 423.538043][ T29] audit: type=1326 audit(1743454322.417:14628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18130 comm="syz.2.5211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58e69ad169 code=0x7ffc0000 [ 423.561700][ T29] audit: type=1326 audit(1743454322.417:14629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18130 comm="syz.2.5211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58e69ad169 code=0x7ffc0000 [ 423.592175][T18129] FAT-fs (loop3): Directory bread(block 69) failed [ 423.598960][T18129] FAT-fs (loop3): Directory bread(block 70) failed [ 423.605942][T18129] FAT-fs (loop3): Directory bread(block 71) failed [ 423.621405][T18129] FAT-fs (loop3): Directory bread(block 72) failed [ 423.628082][T18129] FAT-fs (loop3): Directory bread(block 73) failed [ 423.645194][ T29] audit: type=1326 audit(1743454322.567:14630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18136 comm="syz.2.5213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58e69ad169 code=0x7ffc0000 [ 423.668933][ T29] audit: type=1326 audit(1743454322.567:14631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18136 comm="syz.2.5213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58e69ad169 code=0x7ffc0000 [ 423.692658][ T29] audit: type=1326 audit(1743454322.576:14632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18136 comm="syz.2.5213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f58e69ad169 code=0x7ffc0000 [ 423.716401][ T29] audit: type=1326 audit(1743454322.576:14633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18136 comm="syz.2.5213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f58e69ad169 code=0x7ffc0000 [ 423.740032][ T29] audit: type=1326 audit(1743454322.576:14634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18136 comm="syz.2.5213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f58e69ad169 code=0x7ffc0000 [ 423.784072][T18142] siw: device registration error -23 [ 423.947925][T18151] 9pnet_fd: Insufficient options for proto=fd [ 424.417480][T18167] netdevsim netdevsim0: Direct firmware load for ÿ failed with error -2 [ 424.454076][T18170] loop3: detected capacity change from 0 to 2048 [ 424.466764][T18170] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 424.468885][T18171] SELinux: ebitmap: truncated map [ 424.485684][T18171] SELinux: failed to load policy [ 424.787260][T18187] tipc: Enabling of bearer rejected, already enabled [ 425.358181][T11373] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.391895][T18198] loop3: detected capacity change from 0 to 256 [ 425.409128][T18198] FAT-fs (loop3): Directory bread(block 64) failed [ 425.415986][T18198] FAT-fs (loop3): Directory bread(block 65) failed [ 425.422589][T18198] FAT-fs (loop3): Directory bread(block 66) failed [ 425.429140][T18198] FAT-fs (loop3): Directory bread(block 67) failed [ 425.435706][T18198] FAT-fs (loop3): Directory bread(block 68) failed [ 425.442351][T18198] FAT-fs (loop3): Directory bread(block 69) failed [ 425.449002][T18198] FAT-fs (loop3): Directory bread(block 70) failed [ 425.455525][T18198] FAT-fs (loop3): Directory bread(block 71) failed [ 425.462150][T18198] FAT-fs (loop3): Directory bread(block 72) failed [ 425.468691][T18198] FAT-fs (loop3): Directory bread(block 73) failed [ 425.662759][T18204] loop4: detected capacity change from 0 to 2048 [ 425.683893][T18204] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 425.708321][T18211] loop1: detected capacity change from 0 to 1024 [ 425.724320][T18211] EXT4-fs: Ignoring removed nobh option [ 425.729990][T18211] EXT4-fs: inline encryption not supported [ 425.735897][T18211] EXT4-fs: Ignoring removed bh option [ 425.758301][T18211] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 425.802631][T11087] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.899698][T18225] tipc: Enabling of bearer rejected, already enabled [ 425.958287][T18230] loop1: detected capacity change from 0 to 512 [ 425.969096][T18230] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 425.993857][T18230] EXT4-fs (loop1): 1 truncate cleaned up [ 425.997182][T18233] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5244'. [ 426.000426][T18230] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 426.008743][T18233] netlink: 'syz.0.5244': attribute type 5 has an invalid length. [ 426.028862][T18233] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5244'. [ 426.129331][T18234] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5244'. [ 426.151444][T18234] IPVS: Error joining to the multicast group [ 426.213501][T11087] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.360565][T18241] loop3: detected capacity change from 0 to 2048 [ 426.379434][T18241] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 426.952866][T12281] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.024042][T18256] loop4: detected capacity change from 0 to 1024 [ 427.064018][T18256] EXT4-fs: Ignoring removed nobh option [ 427.069642][T18256] EXT4-fs: inline encryption not supported [ 427.075528][T18256] EXT4-fs: Ignoring removed bh option [ 427.094520][T18256] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 427.122983][T12281] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.167478][T18263] loop4: detected capacity change from 0 to 2048 [ 427.191599][T18263] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 427.214345][T18263] FAULT_INJECTION: forcing a failure. [ 427.214345][T18263] name failslab, interval 1, probability 0, space 0, times 0 [ 427.219142][T18266] netlink: 100 bytes leftover after parsing attributes in process `syz.1.5251'. [ 427.227009][T18263] CPU: 1 UID: 0 PID: 18263 Comm: syz.4.5250 Not tainted 6.14.0-syzkaller-10892-g4e82c87058f4 #0 PREEMPT(voluntary) [ 427.227042][T18263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 427.227059][T18263] Call Trace: [ 427.227097][T18263] [ 427.227109][T18263] dump_stack_lvl+0xf6/0x150 [ 427.227142][T18263] dump_stack+0x15/0x1a [ 427.227206][T18263] should_fail_ex+0x261/0x270 [ 427.227234][T18263] should_failslab+0x8f/0xb0 [ 427.227267][T18263] kmem_cache_alloc_noprof+0x59/0x340 [ 427.227308][T18263] ? __es_insert_extent+0x563/0xed0 [ 427.227388][T18263] __es_insert_extent+0x563/0xed0 [ 427.227423][T18263] ? __list_del_entry_valid_or_report+0x66/0x130 [ 427.227465][T18263] ext4_es_insert_extent+0x45d/0x1c60 [ 427.227565][T18263] ext4_ext_map_blocks+0x1620/0x36a0 [ 427.227602][T18263] ? _raw_spin_unlock+0x26/0x50 [ 427.227634][T18263] ? free_unref_folios+0x70b/0x740 [ 427.227663][T18263] ? invalidate_inode_pages2_range+0x3c2/0x400 [ 427.227698][T18263] ext4_map_query_blocks+0x71/0x180 [ 427.227772][T18263] ext4_map_blocks+0x250/0xdf0 [ 427.227814][T18263] ? __ext4_journal_start_sb+0x130/0x340 [ 427.227844][T18263] ext4_iomap_begin+0x497/0x5c0 [ 427.227935][T18263] iomap_iter+0x32e/0x7a0 [ 427.227961][T18263] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 427.228004][T18263] __iomap_dio_rw+0x6f9/0x12a0 [ 427.228098][T18263] ? ext4_journal_check_start+0x122/0x1b0 [ 427.228128][T18263] iomap_dio_rw+0x40/0x90 [ 427.228281][T18263] ext4_file_write_iter+0xba9/0xf80 [ 427.228332][T18263] do_iter_readv_writev+0x40d/0x4b0 [ 427.228370][T18263] vfs_writev+0x2da/0x880 [ 427.228477][T18263] ? get_pid_task+0x94/0xd0 [ 427.228527][T18263] __se_sys_pwritev2+0x103/0x1d0 [ 427.228564][T18263] __x64_sys_pwritev2+0x78/0x90 [ 427.228599][T18263] x64_sys_call+0x1c86/0x2e10 [ 427.228627][T18263] do_syscall_64+0xc9/0x1c0 [ 427.228732][T18263] ? clear_bhb_loop+0x25/0x80 [ 427.228766][T18263] ? clear_bhb_loop+0x25/0x80 [ 427.228794][T18263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.228851][T18263] RIP: 0033:0x7f64249bd169 [ 427.228872][T18263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 427.228895][T18263] RSP: 002b:00007f6423027038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 427.228919][T18263] RAX: ffffffffffffffda RBX: 00007f6424bd5fa0 RCX: 00007f64249bd169 [ 427.229011][T18263] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000004 [ 427.229027][T18263] RBP: 00007f6423027090 R08: 0000000000000000 R09: 0000000000000000 [ 427.229044][T18263] R10: 0000000000001400 R11: 0000000000000246 R12: 0000000000000001 [ 427.229059][T18263] R13: 0000000000000000 R14: 00007f6424bd5fa0 R15: 00007ffd0e141538 [ 427.229084][T18263] [ 427.508991][T12281] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.541773][T11373] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.556119][T18271] tipc: Enabling of bearer rejected, already enabled [ 427.575380][T18274] loop1: detected capacity change from 0 to 512 [ 427.581988][T18274] journal_path: Non-blockdev passed as './bus' [ 427.588224][T18274] EXT4-fs: error: could not find journal device path [ 427.872162][T18295] 9pnet_fd: Insufficient options for proto=fd [ 427.913084][T18297] loop2: detected capacity change from 0 to 1024 [ 427.921543][T18297] EXT4-fs: Ignoring removed nobh option [ 427.927196][T18297] EXT4-fs: inline encryption not supported [ 427.933170][T18297] EXT4-fs: Ignoring removed bh option [ 427.950391][T18297] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 427.979098][T12440] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.099859][T18310] siw: device registration error -23 [ 428.106921][T18310] netlink: 100 bytes leftover after parsing attributes in process `syz.2.5264'. [ 428.248121][T18314] loop2: detected capacity change from 0 to 512 [ 428.255768][T18314] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 428.264124][T18314] EXT4-fs (loop2): orphan cleanup on readonly fs [ 428.271163][T18314] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.5266: invalid indirect mapped block 256 (level 2) [ 428.284961][T18314] EXT4-fs (loop2): 2 truncates cleaned up [ 428.291131][T18314] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 428.313572][T12440] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.348517][T18319] tipc: Enabling of bearer rejected, already enabled [ 428.400862][T18324] loop2: detected capacity change from 0 to 2048 [ 428.431398][T18324] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 428.580120][T18330] 9pnet_fd: Insufficient options for proto=fd [ 428.605085][T18336] loop1: detected capacity change from 0 to 512 [ 428.624518][T18336] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 428.648851][T18336] ext4 filesystem being mounted at /532/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 428.663219][T18336] EXT4-fs error (device loop1): ext4_do_update_inode:5194: inode #2: comm syz.1.5273: corrupted inode contents [ 428.676287][T18336] EXT4-fs error (device loop1): ext4_dirty_inode:6086: inode #2: comm syz.1.5273: mark_inode_dirty error [ 428.688166][T18336] EXT4-fs error (device loop1): ext4_do_update_inode:5194: inode #2: comm syz.1.5273: corrupted inode contents [ 428.700278][T18336] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #2: comm syz.1.5273: mark_inode_dirty error [ 428.725719][T11087] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.846919][ T29] kauditd_printk_skb: 58 callbacks suppressed [ 428.846934][ T29] audit: type=1326 audit(1743454327.440:14693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18341 comm="syz.4.5275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64249bd169 code=0x7ffc0000 [ 428.876665][ T29] audit: type=1326 audit(1743454327.440:14694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18341 comm="syz.4.5275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64249bd169 code=0x7ffc0000 [ 428.900555][ T29] audit: type=1326 audit(1743454327.440:14695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18341 comm="syz.4.5275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f64249bd169 code=0x7ffc0000 [ 428.924152][ T29] audit: type=1326 audit(1743454327.440:14696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18341 comm="syz.4.5275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64249bd169 code=0x7ffc0000 [ 428.947845][ T29] audit: type=1326 audit(1743454327.440:14697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18341 comm="syz.4.5275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64249bd169 code=0x7ffc0000 [ 428.996210][ T29] audit: type=1326 audit(1743454327.562:14698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18341 comm="syz.4.5275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f64249bd169 code=0x7ffc0000 [ 429.020059][ T29] audit: type=1326 audit(1743454327.562:14699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18341 comm="syz.4.5275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64249bd169 code=0x7ffc0000 [ 429.044600][ T29] audit: type=1326 audit(1743454327.562:14700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18341 comm="syz.4.5275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64249bd169 code=0x7ffc0000 [ 429.068232][ T29] audit: type=1326 audit(1743454327.562:14701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18341 comm="syz.4.5275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f64249bd169 code=0x7ffc0000 [ 429.092220][ T29] audit: type=1326 audit(1743454327.562:14702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18341 comm="syz.4.5275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64249bd169 code=0x7ffc0000 [ 429.118069][T18346] loop4: detected capacity change from 0 to 512 [ 429.125154][T18346] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 429.332832][T12440] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 429.355248][T18354] loop2: detected capacity change from 0 to 512 [ 429.362871][T18354] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 429.371097][T18354] EXT4-fs (loop2): orphan cleanup on readonly fs [ 429.377855][T18354] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.5278: invalid indirect mapped block 256 (level 2) [ 429.394345][T18354] EXT4-fs (loop2): 2 truncates cleaned up [ 429.400442][T18354] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 429.423322][T12440] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 429.515445][T18359] tipc: Enabling of bearer rejected, already enabled [ 430.150834][T18402] tipc: Enabling of bearer rejected, already enabled [ 430.167755][T18394] loop1: detected capacity change from 0 to 2048 [ 430.186128][T18394] ext4: Unknown parameter 'smackfsdef' [ 430.225163][T18405] SELinux: ebitmap: truncated map [ 430.231523][T18405] SELinux: failed to load policy [ 430.261541][T18409] loop4: detected capacity change from 0 to 256 [ 430.274842][T18409] FAT-fs (loop4): Directory bread(block 64) failed [ 430.281516][T18409] FAT-fs (loop4): Directory bread(block 65) failed [ 430.288068][T18409] FAT-fs (loop4): Directory bread(block 66) failed [ 430.294670][T18409] FAT-fs (loop4): Directory bread(block 67) failed [ 430.301233][T18409] FAT-fs (loop4): Directory bread(block 68) failed [ 430.307751][T18409] FAT-fs (loop4): Directory bread(block 69) failed [ 430.314306][T18409] FAT-fs (loop4): Directory bread(block 70) failed [ 430.320869][T18409] FAT-fs (loop4): Directory bread(block 71) failed [ 430.327429][T18409] FAT-fs (loop4): Directory bread(block 72) failed [ 430.334168][T18409] FAT-fs (loop4): Directory bread(block 73) failed [ 431.570847][T18439] tipc: Enabling of bearer rejected, already enabled [ 431.595820][T18441] FAULT_INJECTION: forcing a failure. [ 431.595820][T18441] name failslab, interval 1, probability 0, space 0, times 0 [ 431.608532][T18441] CPU: 1 UID: 0 PID: 18441 Comm: syz.1.5302 Not tainted 6.14.0-syzkaller-10892-g4e82c87058f4 #0 PREEMPT(voluntary) [ 431.608567][T18441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 431.608583][T18441] Call Trace: [ 431.608589][T18441] [ 431.608597][T18441] dump_stack_lvl+0xf6/0x150 [ 431.608626][T18441] dump_stack+0x15/0x1a [ 431.608647][T18441] should_fail_ex+0x261/0x270 [ 431.608746][T18441] should_failslab+0x8f/0xb0 [ 431.608775][T18441] __kvmalloc_node_noprof+0x12c/0x520 [ 431.608847][T18441] ? alloc_netdev_mqs+0xa5/0xac0 [ 431.608871][T18441] ? avc_has_perm_noaudit+0x1cc/0x210 [ 431.608916][T18441] ? __pfx_ip6gre_tunnel_setup+0x10/0x10 [ 431.609002][T18441] alloc_netdev_mqs+0xa5/0xac0 [ 431.609028][T18441] ip6gre_tunnel_locate+0x1b1/0x520 [ 431.609052][T18441] ? should_fail_ex+0xd7/0x270 [ 431.609076][T18441] ? gre_flags_to_tnl_flags+0x1c3/0x1f0 [ 431.609119][T18441] ip6gre_tunnel_siocdevprivate+0x5be/0x720 [ 431.609197][T18441] dev_ifsioc+0x937/0xb20 [ 431.609224][T18441] dev_ioctl+0x8da/0xad0 [ 431.609255][T18441] sock_ioctl+0x5b8/0x630 [ 431.609278][T18441] ? __pfx_sock_ioctl+0x10/0x10 [ 431.609353][T18441] __se_sys_ioctl+0xc9/0x140 [ 431.609415][T18441] __x64_sys_ioctl+0x43/0x50 [ 431.609440][T18441] x64_sys_call+0x168d/0x2e10 [ 431.609527][T18441] do_syscall_64+0xc9/0x1c0 [ 431.609552][T18441] ? clear_bhb_loop+0x25/0x80 [ 431.609579][T18441] ? clear_bhb_loop+0x25/0x80 [ 431.609606][T18441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.609648][T18441] RIP: 0033:0x7f7f8fa3d169 [ 431.609663][T18441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 431.609682][T18441] RSP: 002b:00007f7f8e0a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 431.609705][T18441] RAX: ffffffffffffffda RBX: 00007f7f8fc55fa0 RCX: 00007f7f8fa3d169 [ 431.609743][T18441] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000009 [ 431.609755][T18441] RBP: 00007f7f8e0a7090 R08: 0000000000000000 R09: 0000000000000000 [ 431.609767][T18441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 431.609782][T18441] R13: 0000000000000000 R14: 00007f7f8fc55fa0 R15: 00007ffcb7823c58 [ 431.609808][T18441] [ 432.121689][T18451] loop3: detected capacity change from 0 to 512 [ 432.721604][T18451] EXT4-fs error (device loop3): ext4_ext_check_inode:524: inode #3: comm syz.3.5307: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 432.760988][T18463] loop2: detected capacity change from 0 to 512 [ 432.761569][T18451] EXT4-fs error (device loop3): ext4_quota_enable:7129: comm syz.3.5307: Bad quota inode: 3, type: 0 [ 432.767699][T18463] journal_path: Non-blockdev passed as './bus' [ 432.778715][T18451] EXT4-fs warning (device loop3): ext4_enable_quotas:7170: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 432.784430][T18463] EXT4-fs: error: could not find journal device path [ 432.802091][T18451] EXT4-fs (loop3): mount failed [ 432.854337][T18467] loop4: detected capacity change from 0 to 256 [ 432.869757][T18467] FAT-fs (loop4): Directory bread(block 64) failed [ 432.876321][T18467] FAT-fs (loop4): Directory bread(block 65) failed [ 432.883119][T18467] FAT-fs (loop4): Directory bread(block 66) failed [ 432.889802][T18467] FAT-fs (loop4): Directory bread(block 67) failed [ 432.896434][T18467] FAT-fs (loop4): Directory bread(block 68) failed [ 432.902994][T18467] FAT-fs (loop4): Directory bread(block 69) failed [ 432.909641][T18467] FAT-fs (loop4): Directory bread(block 70) failed [ 432.916230][T18467] FAT-fs (loop4): Directory bread(block 71) failed [ 432.922826][T18467] FAT-fs (loop4): Directory bread(block 72) failed [ 432.929346][T18467] FAT-fs (loop4): Directory bread(block 73) failed [ 433.055762][T18471] loop2: detected capacity change from 0 to 2048 [ 433.109655][T18471] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 433.137743][T18488] loop4: detected capacity change from 0 to 512 [ 433.145099][T18488] journal_path: Non-blockdev passed as './bus' [ 433.151332][T18488] EXT4-fs: error: could not find journal device path [ 433.173644][T12440] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.185492][T18494] siw: device registration error -23 [ 433.191704][T18486] 9pnet_fd: Insufficient options for proto=fd [ 433.200242][T18494] netlink: 100 bytes leftover after parsing attributes in process `syz.3.5314'. [ 433.231732][T18494] loop3: detected capacity change from 0 to 512 [ 433.252682][T18494] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 433.265334][T18494] ext4 filesystem being mounted at /470/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 433.286667][T11373] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.330251][T18510] loop1: detected capacity change from 0 to 256 [ 433.354899][T18510] FAT-fs (loop1): Directory bread(block 64) failed [ 433.363106][T18510] FAT-fs (loop1): Directory bread(block 65) failed [ 433.371026][T18510] FAT-fs (loop1): Directory bread(block 66) failed [ 433.377651][T18510] FAT-fs (loop1): Directory bread(block 67) failed [ 433.385808][T18510] FAT-fs (loop1): Directory bread(block 68) failed [ 433.393656][T18510] FAT-fs (loop1): Directory bread(block 69) failed [ 433.400208][T18510] FAT-fs (loop1): Directory bread(block 70) failed [ 433.410104][T18510] FAT-fs (loop1): Directory bread(block 71) failed [ 433.417113][T18510] FAT-fs (loop1): Directory bread(block 72) failed [ 433.423800][T18510] FAT-fs (loop1): Directory bread(block 73) failed [ 433.630366][T18516] loop4: detected capacity change from 0 to 2048 [ 434.020167][T18526] loop2: detected capacity change from 0 to 256 [ 434.036570][T18526] FAT-fs (loop2): Directory bread(block 64) failed [ 434.043177][T18526] FAT-fs (loop2): Directory bread(block 65) failed [ 434.049724][T18526] FAT-fs (loop2): Directory bread(block 66) failed [ 434.056323][T18526] FAT-fs (loop2): Directory bread(block 67) failed [ 434.062872][T18526] FAT-fs (loop2): Directory bread(block 68) failed [ 434.069472][T18526] FAT-fs (loop2): Directory bread(block 69) failed [ 434.076333][T18526] FAT-fs (loop2): Directory bread(block 70) failed [ 434.082864][T18526] FAT-fs (loop2): Directory bread(block 71) failed [ 434.089644][T18526] FAT-fs (loop2): Directory bread(block 72) failed [ 434.096540][T18526] FAT-fs (loop2): Directory bread(block 73) failed [ 434.168012][T18532] FAULT_INJECTION: forcing a failure. [ 434.168012][T18532] name failslab, interval 1, probability 0, space 0, times 0 [ 434.180983][T18532] CPU: 0 UID: 0 PID: 18532 Comm: syz.0.5331 Not tainted 6.14.0-syzkaller-10892-g4e82c87058f4 #0 PREEMPT(voluntary) [ 434.181081][T18532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 434.181093][T18532] Call Trace: [ 434.181099][T18532] [ 434.181109][T18532] dump_stack_lvl+0xf6/0x150 [ 434.181137][T18532] dump_stack+0x15/0x1a [ 434.181180][T18532] should_fail_ex+0x261/0x270 [ 434.181208][T18532] should_failslab+0x8f/0xb0 [ 434.181233][T18532] __kmalloc_cache_noprof+0x55/0x320 [ 434.181266][T18532] ? __request_module+0x1bf/0x3f0 [ 434.181444][T18532] __request_module+0x1bf/0x3f0 [ 434.181473][T18532] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 434.181526][T18532] __sock_create+0x282/0x5a0 [ 434.181558][T18532] __sys_socketpair+0x192/0x440 [ 434.181635][T18532] __x64_sys_socketpair+0x52/0x60 [ 434.181668][T18532] x64_sys_call+0x2230/0x2e10 [ 434.181696][T18532] do_syscall_64+0xc9/0x1c0 [ 434.181830][T18532] ? clear_bhb_loop+0x25/0x80 [ 434.181851][T18532] ? clear_bhb_loop+0x25/0x80 [ 434.181872][T18532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.181966][T18532] RIP: 0033:0x7f7bbd59d169 [ 434.181984][T18532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 434.182006][T18532] RSP: 002b:00007f7bbbbff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 434.182029][T18532] RAX: ffffffffffffffda RBX: 00007f7bbd7b5fa0 RCX: 00007f7bbd59d169 [ 434.182045][T18532] RDX: 0000000000000000 RSI: 000000000000000a RDI: 0000000000000003 [ 434.182060][T18532] RBP: 00007f7bbbbff090 R08: 0000000000000000 R09: 0000000000000000 [ 434.182071][T18532] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 434.182098][T18532] R13: 0000000000000000 R14: 00007f7bbd7b5fa0 R15: 00007ffd36e30988 [ 434.182118][T18532] [ 434.452423][ T29] kauditd_printk_skb: 348 callbacks suppressed [ 434.452438][ T29] audit: type=1326 audit(1743454332.678:15049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18534 comm="syz.3.5333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c74d1d169 code=0x7ffc0000 [ 434.482282][ T29] audit: type=1326 audit(1743454332.678:15050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18534 comm="syz.3.5333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c74d1d169 code=0x7ffc0000 [ 434.541483][ T29] audit: type=1326 audit(1743454332.734:15051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18534 comm="syz.3.5333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8c74d1d169 code=0x7ffc0000 [ 434.565141][ T29] audit: type=1326 audit(1743454332.734:15052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18534 comm="syz.3.5333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c74d1d169 code=0x7ffc0000 [ 434.588746][ T29] audit: type=1326 audit(1743454332.734:15053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18534 comm="syz.3.5333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c74d1d169 code=0x7ffc0000 [ 434.589727][T18543] 9pnet_fd: Insufficient options for proto=fd [ 434.612411][ T29] audit: type=1326 audit(1743454332.734:15054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18534 comm="syz.3.5333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8c74d1bad0 code=0x7ffc0000 [ 434.642241][ T29] audit: type=1326 audit(1743454332.744:15055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18534 comm="syz.3.5333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8c74d1bad0 code=0x7ffc0000 [ 434.666154][ T29] audit: type=1326 audit(1743454332.744:15056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18534 comm="syz.3.5333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c74d1d169 code=0x7ffc0000 [ 434.689934][ T29] audit: type=1326 audit(1743454332.744:15057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18534 comm="syz.3.5333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c74d1d169 code=0x7ffc0000 [ 434.713598][ T29] audit: type=1326 audit(1743454332.744:15058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18534 comm="syz.3.5333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8c74d1d169 code=0x7ffc0000 [ 434.852543][T18539] siw: device registration error -23 [ 434.862750][T18539] netlink: 100 bytes leftover after parsing attributes in process `syz.0.5334'. [ 435.269425][T18555] loop1: detected capacity change from 0 to 128 [ 435.282461][T18555] EXT4-fs: Ignoring removed nobh option [ 435.292040][T18555] ext4 filesystem being mounted at /545/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 435.302656][T18559] loop2: detected capacity change from 0 to 512 [ 435.322847][T18557] loop4: detected capacity change from 0 to 256 [ 435.330998][T18559] ext4 filesystem being mounted at /394/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 435.343326][T18559] EXT4-fs error (device loop2): ext4_do_update_inode:5194: inode #2: comm syz.2.5338: corrupted inode contents [ 435.355747][T18559] EXT4-fs error (device loop2): ext4_dirty_inode:6086: inode #2: comm syz.2.5338: mark_inode_dirty error [ 435.367518][T18559] EXT4-fs error (device loop2): ext4_do_update_inode:5194: inode #2: comm syz.2.5338: corrupted inode contents [ 435.369972][T18566] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 435.382597][T18559] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #2: comm syz.2.5338: mark_inode_dirty error [ 435.399114][T18564] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 435.414731][T18568] loop1: detected capacity change from 0 to 256 [ 435.446557][T18568] FAT-fs (loop1): Directory bread(block 64) failed [ 435.450040][T18570] loop4: detected capacity change from 0 to 512 [ 435.453119][T18568] FAT-fs (loop1): Directory bread(block 65) failed [ 435.466064][T18568] FAT-fs (loop1): Directory bread(block 66) failed [ 435.472614][T18568] FAT-fs (loop1): Directory bread(block 67) failed [ 435.472618][T18570] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 435.472863][T18570] EXT4-fs (loop4): orphan cleanup on readonly fs [ 435.479162][T18568] FAT-fs (loop1): Directory bread(block 68) failed [ 435.479186][T18568] FAT-fs (loop1): Directory bread(block 69) failed [ 435.490422][T18570] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.5344: invalid indirect mapped block 256 (level 2) [ 435.493494][T18568] FAT-fs (loop1): Directory bread(block 70) failed [ 435.500532][T18570] EXT4-fs (loop4): 2 truncates cleaned up [ 435.506667][T18568] FAT-fs (loop1): Directory bread(block 71) failed [ 435.506709][T18568] FAT-fs (loop1): Directory bread(block 72) failed [ 435.545548][T18568] FAT-fs (loop1): Directory bread(block 73) failed [ 435.651932][T18579] 9pnet_fd: Insufficient options for proto=fd [ 435.717151][T18581] 9pnet: Could not find request transport: fd0x0000000000000004 [ 435.754988][T18585] loop2: detected capacity change from 0 to 512 [ 435.761926][T18585] ext2: Unknown parameter 'measure' [ 435.850505][T18594] FAULT_INJECTION: forcing a failure. [ 435.850505][T18594] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 435.863681][T18594] CPU: 1 UID: 0 PID: 18594 Comm: syz.2.5352 Not tainted 6.14.0-syzkaller-10892-g4e82c87058f4 #0 PREEMPT(voluntary) [ 435.863710][T18594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 435.863726][T18594] Call Trace: [ 435.863734][T18594] [ 435.863744][T18594] dump_stack_lvl+0xf6/0x150 [ 435.863852][T18594] dump_stack+0x15/0x1a [ 435.863868][T18594] should_fail_ex+0x261/0x270 [ 435.863888][T18594] should_fail+0xb/0x10 [ 435.863905][T18594] should_fail_usercopy+0x1a/0x20 [ 435.863931][T18594] copy_fpstate_to_sigframe+0x65d/0x7f0 [ 435.863986][T18594] ? copy_fpstate_to_sigframe+0xed/0x7f0 [ 435.864023][T18594] ? kmem_cache_free+0xe4/0x2e0 [ 435.864124][T18594] ? __sigqueue_free+0xfc/0x140 [ 435.864152][T18594] ? fpu__alloc_mathframe+0x95/0xd0 [ 435.864192][T18594] get_sigframe+0x308/0x440 [ 435.864298][T18594] x64_setup_rt_frame+0xb4/0x5a0 [ 435.864332][T18594] arch_do_signal_or_restart+0x28c/0x4b0 [ 435.864379][T18594] syscall_exit_to_user_mode+0x62/0x120 [ 435.864419][T18594] do_syscall_64+0xd6/0x1c0 [ 435.864509][T18594] ? clear_bhb_loop+0x25/0x80 [ 435.864532][T18594] ? clear_bhb_loop+0x25/0x80 [ 435.864558][T18594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.864587][T18594] RIP: 0033:0x7f58e69ad169 [ 435.864606][T18594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 435.864662][T18594] RSP: 002b:00007f58e4fee038 EFLAGS: 00000246 ORIG_RAX: 000000000000000d [ 435.864680][T18594] RAX: 0000000000000000 RBX: 00007f58e6bc6080 RCX: 00007f58e69ad169 [ 435.864691][T18594] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 000000000000003f [ 435.864770][T18594] RBP: 00007f58e4fee090 R08: 0000200000000a80 R09: 0000000000000000 [ 435.864782][T18594] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 435.864800][T18594] R13: 0000000000000000 R14: 00007f58e6bc6080 R15: 00007fff171ba428 [ 435.864943][T18594] [ 436.073998][T18596] loop4: detected capacity change from 0 to 128 [ 436.080653][T18596] EXT4-fs: Ignoring removed nobh option [ 436.102136][T18596] ext4 filesystem being mounted at /397/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 436.154434][T18600] FAULT_INJECTION: forcing a failure. [ 436.154434][T18600] name failslab, interval 1, probability 0, space 0, times 0 [ 436.167204][T18600] CPU: 0 UID: 0 PID: 18600 Comm: syz.0.5354 Not tainted 6.14.0-syzkaller-10892-g4e82c87058f4 #0 PREEMPT(voluntary) [ 436.167238][T18600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 436.167264][T18600] Call Trace: [ 436.167273][T18600] [ 436.167282][T18600] dump_stack_lvl+0xf6/0x150 [ 436.167311][T18600] dump_stack+0x15/0x1a [ 436.167332][T18600] should_fail_ex+0x261/0x270 [ 436.167358][T18600] should_failslab+0x8f/0xb0 [ 436.167389][T18600] __kmalloc_cache_noprof+0x55/0x320 [ 436.167451][T18600] ? __se_sys_mount+0xf9/0x2e0 [ 436.167484][T18600] ? memdup_user+0xa6/0xd0 [ 436.167512][T18600] __se_sys_mount+0xf9/0x2e0 [ 436.167544][T18600] ? fput+0x99/0xd0 [ 436.167580][T18600] ? ksys_write+0x180/0x1b0 [ 436.167628][T18600] __x64_sys_mount+0x67/0x80 [ 436.167662][T18600] x64_sys_call+0xd11/0x2e10 [ 436.167688][T18600] do_syscall_64+0xc9/0x1c0 [ 436.167707][T18600] ? clear_bhb_loop+0x25/0x80 [ 436.167731][T18600] ? clear_bhb_loop+0x25/0x80 [ 436.167823][T18600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.167846][T18600] RIP: 0033:0x7f7bbd59d169 [ 436.167865][T18600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 436.167886][T18600] RSP: 002b:00007f7bbbbff038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 436.167908][T18600] RAX: ffffffffffffffda RBX: 00007f7bbd7b5fa0 RCX: 00007f7bbd59d169 [ 436.167924][T18600] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 436.168010][T18600] RBP: 00007f7bbbbff090 R08: 0000200000000500 R09: 0000000000000000 [ 436.168022][T18600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 436.168033][T18600] R13: 0000000000000000 R14: 00007f7bbd7b5fa0 R15: 00007ffd36e30988 [ 436.168053][T18600] [ 436.432681][T18605] Cannot find set identified by id 0 to match [ 436.439209][T18605] Restarting kernel threads ... done. [ 436.533512][T18611] loop4: detected capacity change from 0 to 2048 [ 436.540318][T18611] EXT4-fs: Ignoring removed oldalloc option [ 436.633648][T18616] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5360'. [ 436.662479][T18616] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 436.891773][T18611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.903077][T18611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.054350][T18619] chnl_net:caif_netlink_parms(): no params data found [ 437.094629][T18619] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.101788][T18619] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.109050][T18619] bridge_slave_0: entered allmulticast mode [ 437.117040][T18619] bridge_slave_0: entered promiscuous mode [ 437.125809][T18619] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.133015][T18619] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.141187][T18619] bridge_slave_1: entered allmulticast mode [ 437.149284][T18619] bridge_slave_1: entered promiscuous mode [ 437.169970][T18619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 437.180868][T18619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 437.209042][T18619] team0: Port device team_slave_0 added [ 437.215884][T18619] team0: Port device team_slave_1 added [ 437.233292][T18619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 437.240354][T18619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 437.266528][T18619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 437.278726][T18619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 437.285778][T18619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 437.311823][T18619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 437.369741][T18619] hsr_slave_0: entered promiscuous mode [ 437.412773][T18619] hsr_slave_1: entered promiscuous mode [ 437.418880][T18619] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 437.429310][T18619] Cannot create hsr debugfs directory [ 437.501347][T18642] Cannot find set identified by id 0 to match [ 437.514661][T18642] Restarting kernel threads ... done. [ 437.671210][T18619] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 437.682774][T18619] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 437.690051][T18647] loop4: detected capacity change from 0 to 512 [ 437.699758][T18619] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 437.709688][T18619] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 437.729499][T18647] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 437.731117][T18619] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.738828][T18647] EXT4-fs (loop4): orphan cleanup on readonly fs [ 437.744483][T18619] bridge0: port 2(bridge_slave_1) entered forwarding state [ 437.758139][T18619] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.765350][T18619] bridge0: port 1(bridge_slave_0) entered forwarding state [ 437.768019][T18647] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.5369: invalid indirect mapped block 256 (level 2) [ 437.813551][T18619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 437.825771][T18619] 8021q: adding VLAN 0 to HW filter on device team0 [ 437.848185][T18647] EXT4-fs (loop4): 2 truncates cleaned up [ 437.861814][T18653] 9pnet: Could not find request transport: fd0x0000000000000004 [ 437.965045][T18619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 438.073196][T18675] loop2: detected capacity change from 0 to 512 [ 438.103643][T18677] loop4: detected capacity change from 0 to 2048 [ 438.112156][T18675] EXT4-fs error (device loop2): ext4_ext_check_inode:524: inode #3: comm syz.2.5374: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 438.135004][T18675] EXT4-fs error (device loop2): ext4_quota_enable:7129: comm syz.2.5374: Bad quota inode: 3, type: 0 [ 438.157004][T18675] EXT4-fs warning (device loop2): ext4_enable_quotas:7170: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 438.219295][T18619] veth0_vlan: entered promiscuous mode [ 438.228658][T18675] EXT4-fs (loop2): mount failed [ 438.285140][T18619] veth1_vlan: entered promiscuous mode [ 438.302533][T18675] netdevsim netdevsim2: Direct firmware load for ÿ failed with error -2 [ 438.310619][T18619] veth0_macvtap: entered promiscuous mode [ 438.320830][T18619] veth1_macvtap: entered promiscuous mode [ 438.338784][T18619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 438.349407][T18619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.359431][T18619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 438.369989][T18619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.379873][T18619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 438.390591][T18619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.400858][T18619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 438.411439][T18619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.421314][T18619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 438.431758][T18619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.441593][T18619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 438.452031][T18619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.461936][T18619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 438.472396][T18619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.484532][T18619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 438.493480][T18619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 438.504024][T18619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.513899][T18619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 438.524444][T18619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.534457][T18619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 438.545172][T18619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.555023][T18619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 438.565561][T18619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.575407][T18619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 438.585910][T18619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.595813][T18619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 438.606357][T18619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.616201][T18619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 438.626689][T18619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.641544][T18693] loop2: detected capacity change from 0 to 256 [ 438.656301][T18693] FAT-fs (loop2): Directory bread(block 64) failed [ 438.662953][T18693] FAT-fs (loop2): Directory bread(block 65) failed [ 438.669537][T18693] FAT-fs (loop2): Directory bread(block 66) failed [ 438.676150][T18693] FAT-fs (loop2): Directory bread(block 67) failed [ 438.682740][T18693] FAT-fs (loop2): Directory bread(block 68) failed [ 438.689339][T18693] FAT-fs (loop2): Directory bread(block 69) failed [ 438.696075][T18693] FAT-fs (loop2): Directory bread(block 70) failed [ 438.702995][T18693] FAT-fs (loop2): Directory bread(block 71) failed [ 438.709606][T18693] FAT-fs (loop2): Directory bread(block 72) failed [ 438.716175][T18693] FAT-fs (loop2): Directory bread(block 73) failed [ 438.728451][T18619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 438.739976][T18619] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.748946][T18619] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.758523][T18619] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.767326][T18619] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.882795][T18704] loop5: detected capacity change from 0 to 2048 [ 438.955945][T18702] tipc: Enabling of bearer rejected, already enabled [ 439.062227][T18713] loop4: detected capacity change from 0 to 128 [ 439.068974][T18713] EXT4-fs: Ignoring removed nobh option [ 439.076394][T18713] ext4 filesystem being mounted at /405/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 439.131497][T18716] loop4: detected capacity change from 0 to 512 [ 439.149906][T18716] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 439.158053][T18716] EXT4-fs (loop4): orphan cleanup on readonly fs [ 439.165466][T18716] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.5381: invalid indirect mapped block 256 (level 2) [ 439.179226][T18716] EXT4-fs (loop4): 2 truncates cleaned up [ 439.273853][T18721] siw: device registration error -23 [ 439.280861][T18721] netlink: 100 bytes leftover after parsing attributes in process `syz.4.5382'. [ 439.294842][T18721] loop4: detected capacity change from 0 to 512 [ 439.316026][T18721] ext4 filesystem being mounted at /407/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 439.583228][T18730] loop2: detected capacity change from 0 to 512 [ 439.604092][T18730] EXT4-fs error (device loop2): ext4_ext_check_inode:524: inode #3: comm syz.2.5385: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 439.622994][T18730] EXT4-fs error (device loop2): ext4_quota_enable:7129: comm syz.2.5385: Bad quota inode: 3, type: 0 [ 439.634205][T18730] EXT4-fs warning (device loop2): ext4_enable_quotas:7170: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 439.649101][T18730] EXT4-fs (loop2): mount failed [ 439.664814][T18730] netdevsim netdevsim2: Direct firmware load for ÿ failed with error -2 [ 439.758220][T18737] set match dimension is over the limit! [ 439.771003][T18737] Restarting kernel threads ... done. [ 439.815230][ T29] kauditd_printk_skb: 276 callbacks suppressed [ 439.815249][ T29] audit: type=1400 audit(1743454337.701:15335): avc: denied { open } for pid=18742 comm="syz.3.5389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 439.840950][ T29] audit: type=1400 audit(1743454337.701:15336): avc: denied { kernel } for pid=18742 comm="syz.3.5389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 439.862849][ T29] audit: type=1400 audit(1743454337.729:15337): avc: denied { unmount } for pid=18619 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 439.882834][ T29] audit: type=1400 audit(1743454337.729:15338): avc: denied { create } for pid=18742 comm="syz.3.5389" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 439.903966][ T29] audit: type=1400 audit(1743454337.729:15339): avc: denied { mounton } for pid=18742 comm="syz.3.5389" path="/477/file0" dev="tmpfs" ino=2642 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 439.965215][ T29] audit: type=1400 audit(1743454337.842:15340): avc: denied { create } for pid=18746 comm="syz.2.5391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 439.967674][T18748] loop2: detected capacity change from 0 to 128 [ 439.992342][T18748] EXT4-fs: Ignoring removed nobh option [ 440.011605][ T29] audit: type=1400 audit(1743454337.879:15341): avc: denied { unlink } for pid=11373 comm="syz-executor" name="file0" dev="tmpfs" ino=2642 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 440.036531][T18748] ext4 filesystem being mounted at /405/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 440.070633][ T29] audit: type=1400 audit(1743454337.898:15342): avc: denied { mount } for pid=18746 comm="syz.2.5391" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 440.092597][ T29] audit: type=1400 audit(1743454337.935:15343): avc: denied { create } for pid=18755 comm="%-'$]" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 440.101486][T18752] Cannot find set identified by id 0 to match [ 440.112899][ T29] audit: type=1400 audit(1743454337.935:15344): avc: denied { read write } for pid=18755 comm="%-'$]" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 440.159851][T18756] loop3: detected capacity change from 0 to 512 [ 440.166033][T18747] Restarting kernel threads ... done. [ 440.169661][T18756] journal_path: Non-blockdev passed as './bus' [ 440.177895][T18756] EXT4-fs: error: could not find journal device path [ 440.330570][T18768] Cannot find set identified by id 0 to match [ 440.337654][T18768] Restarting kernel threads ... done. [ 440.522695][T18777] loop4: detected capacity change from 0 to 512 [ 440.546089][T18777] journal_path: Non-blockdev passed as './bus' [ 440.552547][T18777] EXT4-fs: error: could not find journal device path [ 441.304340][T18790] loop4: detected capacity change from 0 to 512 [ 441.359433][T18790] ext4 filesystem being mounted at /413/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 441.645895][T18797] loop2: detected capacity change from 0 to 1024 [ 441.684469][T18797] EXT4-fs: Ignoring removed nobh option [ 441.690152][T18797] EXT4-fs: inline encryption not supported [ 441.696002][T18797] EXT4-fs: Ignoring removed bh option [ 441.782476][T18790] EXT4-fs error (device loop4): ext4_do_update_inode:5194: inode #2: comm syz.4.5405: corrupted inode contents [ 441.809082][T18790] EXT4-fs error (device loop4): ext4_dirty_inode:6086: inode #2: comm syz.4.5405: mark_inode_dirty error [ 441.820641][T18790] EXT4-fs error (device loop4): ext4_do_update_inode:5194: inode #2: comm syz.4.5405: corrupted inode contents [ 441.835983][T18790] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #2: comm syz.4.5405: mark_inode_dirty error [ 441.976853][T18813] siw: device registration error -23 [ 441.983889][T18813] netlink: 100 bytes leftover after parsing attributes in process `syz.0.5410'. [ 442.144298][T18820] loop5: detected capacity change from 0 to 256 [ 442.507694][T18832] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5417'. [ 442.530669][T18832] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5417'. [ 442.886771][T18840] loop2: detected capacity change from 0 to 2048 [ 442.913750][T18840] EXT4-fs mount: 30 callbacks suppressed [ 442.913769][T18840] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 443.123523][T18852] loop4: detected capacity change from 0 to 2048 [ 443.138341][T18855] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=8218 sclass=netlink_xfrm_socket pid=18855 comm=syz.0.5423 [ 443.169048][T18852] FAULT_INJECTION: forcing a failure. [ 443.169048][T18852] name failslab, interval 1, probability 0, space 0, times 0 [ 443.181821][T18852] CPU: 0 UID: 0 PID: 18852 Comm: syz.4.5422 Not tainted 6.14.0-syzkaller-10892-g4e82c87058f4 #0 PREEMPT(voluntary) [ 443.181929][T18852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 443.181945][T18852] Call Trace: [ 443.181953][T18852] [ 443.181963][T18852] dump_stack_lvl+0xf6/0x150 [ 443.181988][T18852] dump_stack+0x15/0x1a [ 443.182044][T18852] should_fail_ex+0x261/0x270 [ 443.182070][T18852] should_failslab+0x8f/0xb0 [ 443.182094][T18852] kmem_cache_alloc_noprof+0x59/0x340 [ 443.182132][T18852] ? alloc_empty_file+0x78/0x200 [ 443.182164][T18852] alloc_empty_file+0x78/0x200 [ 443.182264][T18852] path_openat+0x6f/0x2000 [ 443.182288][T18852] ? _parse_integer_limit+0x167/0x180 [ 443.182350][T18852] ? _parse_integer+0x27/0x30 [ 443.182386][T18852] ? kstrtoull+0x115/0x140 [ 443.182419][T18852] ? kstrtouint+0x7b/0xc0 [ 443.182543][T18852] ? kstrtouint_from_user+0xbf/0x100 [ 443.182568][T18852] do_filp_open+0x115/0x240 [ 443.182606][T18852] do_sys_openat2+0xaa/0x110 [ 443.182716][T18852] __x64_sys_creat+0x6a/0x90 [ 443.182814][T18852] x64_sys_call+0x10b4/0x2e10 [ 443.182840][T18852] do_syscall_64+0xc9/0x1c0 [ 443.182872][T18852] ? clear_bhb_loop+0x25/0x80 [ 443.182935][T18852] ? clear_bhb_loop+0x25/0x80 [ 443.182962][T18852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.182986][T18852] RIP: 0033:0x7f64249bd169 [ 443.183005][T18852] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 443.183027][T18852] RSP: 002b:00007f6423027038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 443.183055][T18852] RAX: ffffffffffffffda RBX: 00007f6424bd5fa0 RCX: 00007f64249bd169 [ 443.183071][T18852] RDX: 0000000000000000 RSI: 00000000000000e5 RDI: 0000200000000300 [ 443.183082][T18852] RBP: 00007f6423027090 R08: 0000000000000000 R09: 0000000000000000 [ 443.183097][T18852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 443.183111][T18852] R13: 0000000000000000 R14: 00007f6424bd5fa0 R15: 00007ffd0e141538 [ 443.183134][T18852] [ 443.424076][T18859] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5422'. [ 443.578631][T18868] netdevsim netdevsim4: Direct firmware load for ÿ failed with error -2 [ 443.628669][T18873] netlink: 'syz.4.5429': attribute type 3 has an invalid length. [ 443.652456][T18866] loop5: detected capacity change from 0 to 256 [ 443.677680][T12440] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.724667][T18882] loop2: detected capacity change from 0 to 2048 [ 443.732254][T18882] msdos: Unknown parameter '00000000000000000003ÿÿÿÿÿÿÿÿ0xffffffffffffffff' [ 443.812821][T18886] loop5: detected capacity change from 0 to 2048 [ 443.839732][T18889] FAULT_INJECTION: forcing a failure. [ 443.839732][T18889] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 443.853283][T18889] CPU: 1 UID: 0 PID: 18889 Comm: syz.2.5434 Not tainted 6.14.0-syzkaller-10892-g4e82c87058f4 #0 PREEMPT(voluntary) [ 443.853406][T18889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 443.853422][T18889] Call Trace: [ 443.853431][T18889] [ 443.853442][T18889] dump_stack_lvl+0xf6/0x150 [ 443.853468][T18889] dump_stack+0x15/0x1a [ 443.853490][T18889] should_fail_ex+0x261/0x270 [ 443.853564][T18889] should_fail+0xb/0x10 [ 443.853641][T18889] should_fail_usercopy+0x1a/0x20 [ 443.853669][T18889] _copy_from_user+0x1c/0xa0 [ 443.853694][T18889] copy_msghdr_from_user+0x54/0x2b0 [ 443.853734][T18889] ? __fget_files+0x186/0x1c0 [ 443.853772][T18889] __sys_sendmsg+0x141/0x240 [ 443.853883][T18889] __x64_sys_sendmsg+0x46/0x50 [ 443.853907][T18889] x64_sys_call+0x26f3/0x2e10 [ 443.853936][T18889] do_syscall_64+0xc9/0x1c0 [ 443.853961][T18889] ? clear_bhb_loop+0x25/0x80 [ 443.854002][T18889] ? clear_bhb_loop+0x25/0x80 [ 443.854023][T18889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.854043][T18889] RIP: 0033:0x7f58e69ad169 [ 443.854061][T18889] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 443.854083][T18889] RSP: 002b:00007f58e500f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 443.854103][T18889] RAX: ffffffffffffffda RBX: 00007f58e6bc5fa0 RCX: 00007f58e69ad169 [ 443.854185][T18889] RDX: 0000000000044084 RSI: 0000200000000300 RDI: 0000000000000005 [ 443.854197][T18889] RBP: 00007f58e500f090 R08: 0000000000000000 R09: 0000000000000000 [ 443.854209][T18889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 443.854221][T18889] R13: 0000000000000000 R14: 00007f58e6bc5fa0 R15: 00007fff171ba428 [ 443.854242][T18889] [ 444.057952][T18886] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 444.070406][T18894] loop4: detected capacity change from 0 to 2048 [ 444.093129][T18894] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 444.172794][T18902] loop2: detected capacity change from 0 to 512 [ 444.245778][T18902] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 444.268637][T18902] ext4 filesystem being mounted at /416/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 444.300626][T18902] EXT4-fs error (device loop2): ext4_do_update_inode:5194: inode #2: comm syz.2.5437: corrupted inode contents [ 444.317230][T18902] EXT4-fs error (device loop2): ext4_dirty_inode:6086: inode #2: comm syz.2.5437: mark_inode_dirty error [ 444.331589][T18902] EXT4-fs error (device loop2): ext4_do_update_inode:5194: inode #2: comm syz.2.5437: corrupted inode contents [ 444.345101][T18902] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #2: comm syz.2.5437: mark_inode_dirty error [ 444.394441][T12440] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.407012][T12281] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.477893][T18914] netdevsim netdevsim4: Direct firmware load for ÿ failed with error -2 [ 444.525209][T18918] FAULT_INJECTION: forcing a failure. [ 444.525209][T18918] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 444.538458][T18918] CPU: 1 UID: 0 PID: 18918 Comm: syz.4.5442 Not tainted 6.14.0-syzkaller-10892-g4e82c87058f4 #0 PREEMPT(voluntary) [ 444.538489][T18918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 444.538530][T18918] Call Trace: [ 444.538537][T18918] [ 444.538547][T18918] dump_stack_lvl+0xf6/0x150 [ 444.538576][T18918] dump_stack+0x15/0x1a [ 444.538597][T18918] should_fail_ex+0x261/0x270 [ 444.538622][T18918] should_fail+0xb/0x10 [ 444.538719][T18918] should_fail_usercopy+0x1a/0x20 [ 444.538747][T18918] strncpy_from_user+0x25/0x230 [ 444.538782][T18918] ? getname_flags+0x81/0x3b0 [ 444.538843][T18918] getname_flags+0xb0/0x3b0 [ 444.538909][T18918] __x64_sys_rename+0x40/0x70 [ 444.538942][T18918] x64_sys_call+0x2cd9/0x2e10 [ 444.538984][T18918] do_syscall_64+0xc9/0x1c0 [ 444.539003][T18918] ? clear_bhb_loop+0x25/0x80 [ 444.539084][T18918] ? clear_bhb_loop+0x25/0x80 [ 444.539104][T18918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.539154][T18918] RIP: 0033:0x7f64249bd169 [ 444.539172][T18918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 444.539213][T18918] RSP: 002b:00007f6423027038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 444.539231][T18918] RAX: ffffffffffffffda RBX: 00007f6424bd5fa0 RCX: 00007f64249bd169 [ 444.539251][T18918] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 444.539266][T18918] RBP: 00007f6423027090 R08: 0000000000000000 R09: 0000000000000000 [ 444.539281][T18918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 444.539295][T18918] R13: 0000000000000000 R14: 00007f6424bd5fa0 R15: 00007ffd0e141538 [ 444.539319][T18918] [ 444.784350][T18619] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.811931][T18929] loop4: detected capacity change from 0 to 1024 [ 444.819388][T18924] loop2: detected capacity change from 0 to 256 [ 444.866068][T18924] FAT-fs (loop2): Directory bread(block 64) failed [ 444.883600][T18924] FAT-fs (loop2): Directory bread(block 65) failed [ 444.890565][T18924] FAT-fs (loop2): Directory bread(block 66) failed [ 444.908114][T18924] FAT-fs (loop2): Directory bread(block 67) failed [ 444.922045][T18943] loop4: detected capacity change from 0 to 512 [ 444.929032][T18924] FAT-fs (loop2): Directory bread(block 68) failed [ 444.937583][T18924] FAT-fs (loop2): Directory bread(block 69) failed [ 444.945384][T18924] FAT-fs (loop2): Directory bread(block 70) failed [ 444.953567][T18924] FAT-fs (loop2): Directory bread(block 71) failed [ 444.963462][T18924] FAT-fs (loop2): Directory bread(block 72) failed [ 444.970801][T18924] FAT-fs (loop2): Directory bread(block 73) failed [ 444.992501][T18943] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 445.005319][T18943] ext4 filesystem being mounted at /423/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 445.068314][T18939] EXT4-fs error (device loop4): ext4_do_update_inode:5194: inode #2: comm syz.4.5449: corrupted inode contents [ 445.081375][T18939] EXT4-fs error (device loop4): ext4_dirty_inode:6086: inode #2: comm syz.4.5449: mark_inode_dirty error [ 445.093377][T18939] EXT4-fs error (device loop4): ext4_do_update_inode:5194: inode #2: comm syz.4.5449: corrupted inode contents [ 445.113107][T18939] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #2: comm syz.4.5449: mark_inode_dirty error [ 445.143567][T18952] loop3: detected capacity change from 0 to 512 [ 445.150552][T18952] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 445.254547][T12281] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.478967][T18963] loop4: detected capacity change from 0 to 2048 [ 445.517294][T18963] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 445.650667][T18963] ================================================================== [ 445.658823][T18963] BUG: KCSAN: data-race in filemap_write_and_wait_range / xas_set_mark [ 445.667105][T18963] [ 445.669438][T18963] write to 0xffff888106b15d44 of 4 bytes by task 18967 on cpu 0: [ 445.677175][T18963] xas_set_mark+0x13d/0x150 [ 445.681690][T18963] __folio_start_writeback+0x1ea/0x440 [ 445.687174][T18963] ext4_bio_write_folio+0x591/0x9d0 [ 445.692392][T18963] mpage_process_page_bufs+0x488/0x5d0 [ 445.697869][T18963] mpage_prepare_extent_to_map+0x791/0xb80 [ 445.703685][T18963] ext4_do_writepages+0xa3b/0x21d0 [ 445.708819][T18963] ext4_writepages+0x183/0x320 [ 445.713599][T18963] do_writepages+0x1d8/0x480 [ 445.718207][T18963] file_write_and_wait_range+0x16e/0x2f0 [ 445.723863][T18963] generic_buffers_fsync_noflush+0x46/0x120 [ 445.729783][T18963] ext4_sync_file+0x1c3/0x6c0 [ 445.734478][T18963] vfs_fsync_range+0x116/0x130 [ 445.739255][T18963] ext4_buffered_write_iter+0x358/0x3c0 [ 445.744827][T18963] ext4_file_write_iter+0xe49/0xf80 [ 445.750055][T18963] iter_file_splice_write+0x5f2/0x980 [ 445.755464][T18963] direct_splice_actor+0x160/0x2c0 [ 445.760595][T18963] splice_direct_to_actor+0x305/0x680 [ 445.765988][T18963] do_splice_direct+0xd9/0x150 [ 445.770763][T18963] do_sendfile+0x40a/0x690 [ 445.775209][T18963] __x64_sys_sendfile64+0x113/0x160 [ 445.780442][T18963] x64_sys_call+0xfc3/0x2e10 [ 445.785059][T18963] do_syscall_64+0xc9/0x1c0 [ 445.789581][T18963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.795483][T18963] [ 445.797809][T18963] read to 0xffff888106b15d44 of 4 bytes by task 18963 on cpu 1: [ 445.805444][T18963] filemap_write_and_wait_range+0x105/0x370 [ 445.811353][T18963] filemap_invalidate_pages+0xa8/0x1a0 [ 445.816831][T18963] kiocb_invalidate_pages+0x6c/0x80 [ 445.822046][T18963] __iomap_dio_rw+0x5d4/0x12a0 [ 445.826821][T18963] iomap_dio_rw+0x40/0x90 [ 445.831159][T18963] ext4_file_write_iter+0xba9/0xf80 [ 445.836374][T18963] iter_file_splice_write+0x5f2/0x980 [ 445.841757][T18963] direct_splice_actor+0x160/0x2c0 [ 445.846881][T18963] splice_direct_to_actor+0x305/0x680 [ 445.852262][T18963] do_splice_direct+0xd9/0x150 [ 445.857034][T18963] do_sendfile+0x40a/0x690 [ 445.861465][T18963] __x64_sys_sendfile64+0x113/0x160 [ 445.866683][T18963] x64_sys_call+0xfc3/0x2e10 [ 445.871283][T18963] do_syscall_64+0xc9/0x1c0 [ 445.875802][T18963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.881701][T18963] [ 445.884026][T18963] value changed: 0x0a000021 -> 0x04000021 [ 445.889741][T18963] [ 445.892063][T18963] Reported by Kernel Concurrency Sanitizer on: [ 445.898213][T18963] CPU: 1 UID: 0 PID: 18963 Comm: syz.4.5455 Not tainted 6.14.0-syzkaller-10892-g4e82c87058f4 #0 PREEMPT(voluntary) [ 445.910406][T18963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 445.920467][T18963] ================================================================== [ 446.350414][T12281] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.