last executing test programs: 2.782646243s ago: executing program 2 (id=833): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000540)={[{@noinit_itable}, {@grpquota}]}, 0x4, 0x4f5, &(0x7f0000000c80)="$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") r0 = io_uring_setup(0x4f01, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = accept4(r1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close_range(r0, r3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) connect$tipc(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) 1.927645835s ago: executing program 2 (id=842): bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={0xffffffffffffffff, 0x0, &(0x7f0000002780)=""/4096, 0xc26bfe8e8f6baca8}, 0x20) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x1}, 0x18) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x844e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x10eb22b000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000004000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000001c0), 0x2, 0x431, &(0x7f0000000d80)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140)='system_u:object_r:crond_initrc_exec_t:s0\x00', 0x29, 0x0) getdents(r1, &(0x7f0000000080)=""/204, 0xcc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRESHEX=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000273872880000f8ffffffb303000002000000b704000000000000850000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000001c0)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x40000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) close(r2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r7, 0x0, 0x8000f28, 0x0) splice(r6, 0x0, r5, 0x0, 0x7f, 0xe) write(r4, 0x0, 0x0) 1.543804798s ago: executing program 1 (id=847): prctl$PR_GET_CHILD_SUBREAPER(0x25) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x6, 0x20400) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xab, 0xab, 0xb, [@datasec={0x10, 0x4, 0x0, 0xf, 0x3, [{0x2, 0x1, 0x5}, {0x2, 0x5, 0x9a}, {0x4, 0x0, 0x3}, {0x5, 0x2, 0x5}], "24c717"}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0xe01}}, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x6d, 0x1}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x9, 0x4}, {0x10, 0x4}]}, @var={0x2, 0x0, 0x0, 0xe, 0x5}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0x599}}]}, {0x0, [0x2e, 0x61, 0x30, 0x0, 0x61, 0x0, 0x5f, 0x2e, 0x61]}}, &(0x7f0000000140)=""/56, 0xcf, 0x38, 0x1, 0xfffffffa, 0x0, @void, @value}, 0x28) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x4, 0x144, 0xf35e, 0x11d4d58366598417, r0, 0x5, '\x00', 0x0, r1, 0x0, 0x4, 0x1, 0x5, @value=r2, @void, @value}, 0x50) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e22, @remote}, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r0) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r4, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0xfffffffd}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x583dc8fe6a174154}, 0x8000) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000680)={'tunl0\x00', &(0x7f0000000600)={'syztnl2\x00', 0x0, 0x20, 0x1, 0x0, 0x5, {{0x16, 0x4, 0x2, 0x5, 0x58, 0x68, 0x0, 0xf2, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@cipso={0x86, 0x37, 0x3, [{0x0, 0x10, "496c8c4fa6f60beeca23ed93f5de"}, {0x7, 0xf, "c37a35aad361794b6ffd2e4807"}, {0x5, 0x12, "9bf7abc54389322fe9e7557823f15be9"}]}, @generic={0x7, 0x6, "3c2ab619"}, @lsrr={0x83, 0x7, 0x11, [@multicast1]}]}}}}}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000980)={r1, 0x20, &(0x7f0000000940)={&(0x7f0000000740)=""/250, 0xfa, 0x0, &(0x7f0000000840)=""/240, 0xf0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1a, 0x25, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @exit, @btf_id={0x18, 0x2, 0x3, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fffffff}}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x9}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000540)='GPL\x00', 0x1, 0x50, &(0x7f0000000580)=""/80, 0x41100, 0xc, '\x00', r5, @tracing=0x1a, r2, 0x8, &(0x7f00000006c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000700)={0x3, 0x8, 0x7, 0x3}, 0x10, r6, r0, 0x3, &(0x7f00000009c0)=[r3, r0, r0, r3], &(0x7f0000000a00)=[{0x3, 0x3, 0xf, 0xb}, {0x2, 0x2, 0x1, 0x3}, {0x1, 0x3, 0x10, 0xa}], 0x10, 0x1, @void, @value}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_GET(r7, &(0x7f0000000d00)={&(0x7f0000000b00), 0xc, &(0x7f0000000cc0)={&(0x7f0000000b40)={0x164, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x556f}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffffc}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7fff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xe}}]}, 0x164}, 0x1, 0x0, 0x0, 0x40088a4}, 0x84) syz_io_uring_setup(0x57d8, &(0x7f0000000d40)={0x0, 0x7, 0x4, 0x2, 0x19a, 0x0, r0}, &(0x7f0000000dc0), &(0x7f0000000e00)) r8 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x9) fsync(r8) fsetxattr$trusted_overlay_upper(r3, &(0x7f0000000e40), &(0x7f0000000e80)={0x0, 0xfb, 0xc7, 0x5, 0x7, "411059df914d2dab15c67b63ff8d0059", "0e67fc016d564cfdc9c479ae807cf8e506447223892ab0028c60576d0b1660d2385b46995bd7331f70774e194e2d61623d2f4d7162febf9f496e08a1817b94950439eb3d5d9d188eaab31892a134810306657a66d02ea61c58805eafed8f25d3aa4695b4c38e8f3a8a7b8c746cbbf4c8d0b7f648779838303715a8f3b64870b331a1b366b3bbd8d353be755c9174b1ccde0dc4468a784821ceeaa0f0c2a1eb5bd91093bae037e3244c286a94bcf4f0530b6b"}, 0xc7, 0x1) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000fc0), r7) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x38, r9, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0x55}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x18000) socket$packet(0x11, 0x3, 0x300) ioctl$KDFONTOP_SET(r8, 0x4b72, &(0x7f00000014c0)={0x0, 0x1, 0xa, 0x1f, 0x10c, &(0x7f00000010c0)="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"}) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000001500)=0x4, 0x4) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000001580), r7) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000001680)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001640)={&(0x7f00000015c0)={0x54, r10, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5bfc0000}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfffffffb}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x88}]}, 0x54}, 0x1, 0x0, 0x0, 0x40060}, 0x4801) r11 = openat$dir(0xffffff9c, &(0x7f00000016c0)='./file0\x00', 0x6000, 0x1d8) r12 = syz_create_resource$binfmt(&(0x7f0000001700)='./file0\x00') execveat$binfmt(r11, r12, &(0x7f00000017c0)={[&(0x7f0000001740)=',:D-#\x00', &(0x7f0000001780)='+\x00']}, &(0x7f00000018c0)={[&(0x7f0000001800)='netdevsim', &(0x7f0000001840)='!!#$*^\\\x00', &(0x7f0000001880)='/\x00']}, 0x1000) write$P9_RSETATTR(r0, &(0x7f0000001900)={0x7, 0x1b, 0x2}, 0x7) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000001940)=[0x8, 0xfff4, 0x3ff, 0x0, 0x7, 0xb5dc, 0x2, 0x2, 0x472c]) io_setup(0xfffffff7, &(0x7f0000001980)) 1.460670043s ago: executing program 1 (id=848): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000005000000010001000f00000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000f1ff007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) fsopen(&(0x7f0000000040)='ramfs\x00', 0x0) (fail_nth: 6) 1.425538115s ago: executing program 1 (id=850): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r1, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000ffff0c63b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 1.394620007s ago: executing program 2 (id=852): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0500000004000000ff0f00000700000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x1, 0x0, 0x0, 0x0, 0xda, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x169a82, 0x108) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)=[0x7f201170], 0x0, 0xffffffffffffff89, 0x1, 0x1}}, 0x3c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r2}, 0x10) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$notify(r4, 0x402, 0x100000019) r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000600), 0x80100, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x0, &(0x7f00000006c0)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) fcntl$notify(r5, 0x402, 0x80000003) fcntl$notify(r4, 0x402, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000700), r1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000740)=ANY=[@ANYRESDEC=r5, @ANYRESHEX], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1.392444027s ago: executing program 1 (id=853): listxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)=""/32, 0x20) prctl$PR_SET_NAME(0xf, &(0x7f0000000340)='+}[@\x00\n\xfc\x89QSa\xd5\xd9\xea\xa7\x1b\x1d\xae\t5\x96\xe3]H\x9e\xf7\xdb\xda\xde\xe6&$\x154\xc6\xa5\xc6w\xae\xecp\xd16\xee\xbf\x01[t\x98\aD%_\xe3\x126\xe1\xd4\xca^\xe4\xf9-\xd0K\xf0\xc3\x7f\xc6$\"\x932\xc6B\xec\xe4fL\xecc\xf2\fD\xa5\xac1Z\xef\xff\a\x00\x00\x00\x00\x00\x00vy\xf9(j\n9\x90\xbf\xa1l=b\xa4\xde\x8a1\x19\xd1\xa1\xa2\xf1L\x8e\xcfB\\6\x91\nUkO\x88#\xcd\x8e\xf7=$\x9f\xb9\xfa\xbel2?*\xce\xd6Q9g\am\x97\xbf\xb9\x9e\x95\x8c\x1e\xccC\x94\x9fDG\x13GK\xda\x85\x8a\xf1J\x85\x9cp\xb2\x16\'\a,\xae\xb1\x1a\xc9v\xeaa\xa0\xb0,\x9f\xef\xdc\xd4\xb09\xad\"\xa4\x92Y`\xd9\xd5j\xca\x0e\x18d\xf1\x82\x1dg\xee') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r3 = socket$inet6(0xa, 0x40000080806, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x5, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) close(r3) 1.33599473s ago: executing program 1 (id=857): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0}, 0x18) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x1) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) 1.309741042s ago: executing program 4 (id=859): r0 = socket(0x11, 0x3, 0x0) (async, rerun: 32) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) (rerun: 32) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000c8, &(0x7f0000000440)=ANY=[@ANYRESDEC=0x0, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000300000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) (async) syz_clone(0x80281800, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) (async) listen(r4, 0x0) (async) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) (async) r6 = accept(r4, 0x0, 0x0) (async, rerun: 32) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="120000000400000004000000a400000000000000", @ANYBLOB="bb46bf39c45c983bed57bda883a69534f0ec4fe5c267b1244e8c23129e06dc934cf9484cfbfe91c25a20302f72230d1fd57ca9d63a16157938862d0322e319d5d1a5392e7ecef33fdfe67a2be9b058ae6df2e2219b3ab6a9620b08a9c3db6c538e289e509c310b3a6dd56913be3cb82947d91c8e1603cc84d7c7a9f5c8dabaf602ff143cb2e52d6b", @ANYBLOB="0000000000000000460d5b229a00"/25, @ANYRES16=r5, @ANYRES32=r1, @ANYBLOB="00000000f4346c22bd156bc7047600000000000000ff000000000000dcbbbad8103866cf4b0000000000de5b44ce326ac4050eadd9ed04ccfc5f0053f8a489a7188c7fc299efb2762e41db0b0aade271277299f9d566470fb5e17f3329f88be105fec19b27564253a0f4ad900a2f81704a06733807be5fa742d467842a"], 0x48) (rerun: 32) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r7, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6=r6}, 0x47) (async, rerun: 64) r8 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="111a000000000000000005000000180001801400020073797a5f74756e000000000000000000180003800a0002"], 0x44}}, 0x0) (async) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r6, &(0x7f0000000340)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f0000000080)={0x14, r9, 0x300, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20008080) (async, rerun: 32) recvmsg$can_bcm(r6, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) (rerun: 32) r10 = socket$nl_route(0x10, 0x3, 0x0) fsetxattr(r10, &(0x7f0000000280)=@random={'user.', 'H!#$$^$\'$@\x00'}, 0x0, 0x0, 0x1) (async, rerun: 64) r11 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) r13 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r13}, 0x10) (async) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r12, 0x1, 0x0, 0x6, @dev}, 0x14) (async) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) (async) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0aba61f63047d2900ffffca88faca"], 0xdd12}], 0x1}, 0x0) 1.239217196s ago: executing program 0 (id=860): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000880)='./bus\x00', 0x40, &(0x7f00000000c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@nodelalloc}, {@abort}, {@noload}, {@noload}]}, 0x64, 0x50a, &(0x7f0000000900)="$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") perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8000ef, 0x1af1ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8901, 0x20084000) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441700322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6de6269613800", 0x40}, 0x48, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x4, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) 1.238906766s ago: executing program 4 (id=861): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000000)={0x87, @rand_addr=0x64010102, 0x4e22, 0x4, 'sed\x00', 0xa, 0xb2, 0x3}, 0x2c) writev(r1, &(0x7f0000000780)=[{&(0x7f00000004c0)='5', 0x2b}], 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000280)={'ip6gretap0\x00', @broadcast}) 1.238270166s ago: executing program 2 (id=862): bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={0xffffffffffffffff, 0x0, &(0x7f0000002780)=""/4096, 0xc26bfe8e8f6baca8}, 0x20) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x1}, 0x18) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x844e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x10eb22b000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000004000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000001c0), 0x2, 0x431, &(0x7f0000000d80)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140)='system_u:object_r:crond_initrc_exec_t:s0\x00', 0x29, 0x0) getdents(r1, &(0x7f0000000080)=""/204, 0xcc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRESHEX=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000273872880000f8ffffffb303000002000000b704000000000000850000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000001c0)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x40000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) close(r2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r7, 0x0, 0x8000f28, 0x0) splice(r6, 0x0, r5, 0x0, 0x7f, 0xe) write(r4, 0x0, 0x0) 1.193371808s ago: executing program 4 (id=863): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, r3, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xc}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xa675}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xd06}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x810}, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r5, 0x0) shutdown(r4, 0x0) connect$unix(r4, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r6 = accept(r5, 0x0, 0x0) sendto$inet6(r6, &(0x7f0000000000)='\x00', 0x1, 0x0, 0x0, 0x0) 1.190619389s ago: executing program 4 (id=864): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1, 0x2000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffde, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 982.930041ms ago: executing program 3 (id=865): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="0200000004000000050000000200000000100000", @ANYRES32, @ANYBLOB="00000000b56c00000000000000000040000000004c0fd979978c55c61d4d58fe6e8e2f9a56c9c6c1bf3f9bf9d5104448c9db909992f29fec729c41e6949c369fd8361466a199c3070fdab8b4b9a87f84e899d9ec540fc4511b695cfc05c803ad14bee0cc6a256914de2d2db9d34b47a0c2ba8122f98dc543e15b858469fee2f0d902587b7423b7f125e182eadec154dcee1952c06cab98e4835a890504759588bd35d0e6da703483b76bf6bade01892dad7f6e079e46", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_timedreceive(r1, 0x0, 0xfffffffffffffee3, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x3ed7, 0x0) 840.81211ms ago: executing program 2 (id=866): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000020b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r1, &(0x7f0000033240)=""/102400, 0x19000, 0x100008) 764.856765ms ago: executing program 3 (id=867): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f00000002c0)=0x2, 0x4) sendmsg$802154_dgram(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, @short}, 0x14, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="b400000002000000de0a0000000000006201a4000000000095000000000000006681fabfa7afdea451352385fd277a26b1928972a90713774dee000000008a"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$ITER_CREATE(0x21, &(0x7f00000010c0), 0x8) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000280), 0x1, 0x76a, &(0x7f0000001b00)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="0500007a99e0636200042720c7b029889cd2696900000000000000248735e313c97100", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x100000200, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r8}, 0x10) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000001400)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e8, 0x0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x418, 0x3d8, 0x3d8, 0x418, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x2, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz1\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x548) pwritev2(r6, &(0x7f0000000000)=[{&(0x7f00000002c0)="ca82c66ce754b52c27d8c3045e05174fb2cd83904c6405f3cefa1ee46ab4af638eade922030a3c34a0fff79be39adb32c6f5f8151cead882c6b9962d1de6a8c4", 0x40}], 0x1, 0x1, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x0, 0x100000001}) close(r2) splice(r1, 0x0, r2, 0x0, 0x80000001, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r10}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002ac0)=@newtaction={0x88c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xcfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc582, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x8, 0x10000, 0x0, 0x0, 0x0, 0x6, 0x0, 0x100, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x20000000, 0x0, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xe53c0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x5, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x4, 0x2, 0x0, 0x0, 0x0, 0xff}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) 561.401127ms ago: executing program 2 (id=868): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x50}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r1, &(0x7f0000000d00)="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", 0x110) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000882b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34c8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 536.759408ms ago: executing program 3 (id=869): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) getpid() r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000020000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 507.32214ms ago: executing program 3 (id=870): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000ffff0c63b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 488.772891ms ago: executing program 1 (id=871): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000880)='./bus\x00', 0x40, &(0x7f00000000c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@nodelalloc}, {@abort}, {@noload}, {@noload}]}, 0x64, 0x50a, &(0x7f0000000900)="$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") perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8000ef, 0x1af1ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8901, 0x20084000) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 463.675212ms ago: executing program 3 (id=872): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0500000004000000ff0f00000700000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x1, 0x0, 0x0, 0x0, 0xda, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x169a82, 0x108) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)=[0x7f201170], 0x0, 0xffffffffffffff89, 0x1, 0x1}}, 0x3c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r2}, 0x10) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$notify(r4, 0x402, 0x100000019) r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000600), 0x80100, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x0, &(0x7f00000006c0)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) fcntl$notify(r5, 0x402, 0x80000003) fcntl$notify(r4, 0x402, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000700), r1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000740)=ANY=[@ANYRESDEC=r5, @ANYRESHEX], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 353.070679ms ago: executing program 0 (id=873): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x19, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x19, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={0xffffffffffffffff, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa000000000000000014000200020000006401010100000000000000000d0001007564703a73"], 0x54}}, 0x0) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)={0x7c, r1, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_LINK={0x60, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x55c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)={0x7c, r1, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_LINK={0x60, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x55c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x9c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x12) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_xfrm(0x10, 0x3, 0x6) clock_adjtime(0xffffffd3, &(0x7f0000000340)={0x1383, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff}) syz_io_uring_setup(0x366d, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f00000003c0), &(0x7f0000000100)) socket$phonet_pipe(0x23, 0x5, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) 352.286959ms ago: executing program 3 (id=874): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x81, 0x1f, 0x8, 0x0, @remote, @loopback={0xfec0ffff00000000}, 0x8000, 0x1, 0x80008004, 0x2}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0500000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="00000000bb54617493e16f280000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000007000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) modify_ldt$write(0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000208060001080006040002aaaaaaaaaa00ac1414bbaaaaaaaaaa00ac"], 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @link_local}, 0x14) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r7}, 0x18) setitimer(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_setup(0x1000006a, &(0x7f0000000080)={0x0, 0x0, 0x40, 0x1, 0x3}, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x85c, 0x0, @perf_config_ext={0x101}, 0x120ca, 0xeb, 0x0, 0x5, 0x59f4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) socket(0x2a, 0x2, 0x0) r9 = openat$selinux_avc_hash_stats(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSBRKP(r9, 0x5425, 0x6) close_range(r8, 0xffffffffffffffff, 0x0) 343.0022ms ago: executing program 4 (id=875): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x1) mount$tmpfs(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) umount2(&(0x7f0000000100)='./file0/file0\x00', 0xb) 291.453333ms ago: executing program 4 (id=876): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000880)='./bus\x00', 0x40, &(0x7f00000000c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@nodelalloc}, {@abort}, {@noload}, {@noload}]}, 0x64, 0x50a, &(0x7f0000000900)="$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") perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8000ef, 0x1af1ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8901, 0x20084000) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) r7 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441700322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6de6269613800", 0x40}, 0x48, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x4, r7, 0x0, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x4, 0x0, 0x0, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) 197.572548ms ago: executing program 0 (id=877): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="0200000004000000050000000200000000100000", @ANYRES32, @ANYBLOB="00000000b56c00000000000000000040000000004c0fd979978c55c61d4d58fe6e8e2f9a56c9c6c1bf3f9bf9d5104448c9db909992f29fec729c41e6949c369fd8361466a199c3070fdab8b4b9a87f84e899d9ec540fc4511b695cfc05c803ad14bee0cc6a256914de2d2db9d34b47a0c2ba8122f98dc543e15b858469fee2f0d902587b7423b7f125e182eadec154dcee1952c06cab98e4835a890504759588bd35d0e6da703483b76bf6bade01892dad7f6e079e46", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_timedreceive(r1, 0x0, 0xfffffffffffffee3, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x3ed7, 0x0) 173.9896ms ago: executing program 0 (id=878): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000020b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r1, &(0x7f0000033240)=""/102400, 0x19000, 0x100008) 155.487661ms ago: executing program 0 (id=879): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f00000002c0)=0x2, 0x4) sendmsg$802154_dgram(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, @short}, 0x14, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="b400000002000000de0a0000000000006201a4000000000095000000000000006681fabfa7afdea451352385fd277a26b1928972a90713774dee000000008a"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$ITER_CREATE(0x21, &(0x7f00000010c0), 0x8) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000280), 0x1, 0x76a, &(0x7f0000001b00)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="0500007a99e0636200042720c7b029889cd2696900000000000000248735e313c97100", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x100000200, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r8}, 0x10) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000001400)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e8, 0x0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x418, 0x3d8, 0x3d8, 0x418, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x2, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz1\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x548) pwritev2(r6, &(0x7f0000000000)=[{&(0x7f00000002c0)="ca82c66ce754b52c27d8c3045e05174fb2cd83904c6405f3cefa1ee46ab4af638eade922030a3c34a0fff79be39adb32c6f5f8151cead882c6b9962d1de6a8c4", 0x40}], 0x1, 0x1, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x0, 0x100000001}) close(r2) splice(r1, 0x0, r2, 0x0, 0x80000001, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r10}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002ac0)=@newtaction={0x88c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xcfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc582, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x8, 0x10000, 0x0, 0x0, 0x0, 0x6, 0x0, 0x100, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x20000000, 0x0, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xe53c0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x5, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x4, 0x2, 0x0, 0x0, 0x0, 0xff}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) 0s ago: executing program 0 (id=880): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000540)={[{@noinit_itable}, {@grpquota}]}, 0x4, 0x4f5, &(0x7f0000000c80)="$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") r0 = io_uring_setup(0x4f01, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = accept4(r1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close_range(r0, r3, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) connect$tipc(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): wframe+0x77/0x7f [ 60.173162][ T4975] RIP: 0033:0x7fc3875adff9 [ 60.177742][ T4975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.197447][ T4975] RSP: 002b:00007fc386227038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 60.205995][ T4975] RAX: ffffffffffffffda RBX: 00007fc387765f80 RCX: 00007fc3875adff9 [ 60.214043][ T4975] RDX: 0000000000000028 RSI: 0000000020000080 RDI: 000000000000000a [ 60.222063][ T4975] RBP: 00007fc387620296 R08: 0000000000000000 R09: 0000000000000000 [ 60.230143][ T4975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 60.238197][ T4975] R13: 0000000000000000 R14: 00007fc387765f80 R15: 00007ffd00b9bd98 [ 60.246241][ T4975] [ 60.249299][ T4975] ---[ end trace 0000000000000000 ]--- [ 60.290340][ T4986] loop0: detected capacity change from 0 to 2048 [ 60.347817][ T3760] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.387010][ T4986] xt_CT: You must specify a L4 protocol and not use inversions on it [ 60.387543][ T4986] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 60.422810][ T4986] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 60.435123][ T4986] EXT4-fs (loop0): This should not happen!! Data will be lost [ 60.435123][ T4986] [ 60.444893][ T4986] EXT4-fs (loop0): Total free blocks count 0 [ 60.451000][ T4986] EXT4-fs (loop0): Free/Dirty block details [ 60.456919][ T4986] EXT4-fs (loop0): free_blocks=2415919104 [ 60.463062][ T4986] EXT4-fs (loop0): dirty_blocks=16 [ 60.468320][ T4986] EXT4-fs (loop0): Block reservation details [ 60.474346][ T4986] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 60.584773][ T5001] loop2: detected capacity change from 0 to 512 [ 60.659163][ T5003] SELinux: Context is not valid (left unmapped). [ 60.683832][ T5001] EXT4-fs warning (device loop2): read_mmp_block:115: Error -117 while reading MMP block 0 [ 60.897572][ T5015] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 60.899267][ T5012] loop7: detected capacity change from 0 to 7 [ 60.904155][ T5015] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 60.910398][ T5012] Buffer I/O error on dev loop7, logical block 0, async page read [ 60.917879][ T5015] vhci_hcd vhci_hcd.0: Device attached [ 60.925749][ T5012] Buffer I/O error on dev loop7, logical block 0, async page read [ 60.939063][ T5012] loop7: unable to read partition table [ 60.941178][ T5017] usbip_core: unknown command [ 60.947678][ T5012] loop_reread_partitions: partition scan of loop7 (被xڬdƤݡ [ 60.947678][ T5012] ) failed (rc=-5) [ 60.949470][ T5017] vhci_hcd: unknown pdu 0 [ 60.967068][ T5017] usbip_core: unknown command [ 60.985788][ T50] vhci_hcd: stop threads [ 60.990154][ T50] vhci_hcd: release socket [ 60.994601][ T50] vhci_hcd: disconnect device [ 61.080994][ T5030] xt_CT: You must specify a L4 protocol and not use inversions on it [ 61.082192][ T5028] loop7: detected capacity change from 0 to 7 [ 61.097847][ T5028] Buffer I/O error on dev loop7, logical block 0, async page read [ 61.106296][ T5028] Buffer I/O error on dev loop7, logical block 0, async page read [ 61.114294][ T5028] loop7: unable to read partition table [ 61.122990][ T5028] loop_reread_partitions: partition scan of loop7 (被xڬdƤݡ [ 61.122990][ T5028] ) failed (rc=-5) [ 61.158568][ T5036] netlink: 256 bytes leftover after parsing attributes in process `syz.1.478'. [ 61.197519][ T5036] xt_TPROXY: Can be used only with -p tcp or -p udp [ 61.220762][ T5041] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 61.230798][ T5041] veth0_to_bridge: entered promiscuous mode [ 61.238283][ T5040] veth0_to_bridge: left promiscuous mode [ 61.456462][ T5046] hub 9-0:1.0: USB hub found [ 61.461289][ T5046] hub 9-0:1.0: 8 ports detected [ 61.597976][ T5050] loop0: detected capacity change from 0 to 512 [ 61.608018][ T5050] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 61.734016][ T5050] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.482: bg 0: block 248: padding at end of block bitmap is not set [ 61.753339][ T5050] EXT4-fs error (device loop0): ext4_acquire_dquot:6879: comm syz.0.482: Failed to acquire dquot type 1 [ 61.804807][ T5050] EXT4-fs (loop0): 1 truncate cleaned up [ 61.813532][ T5050] ext4 filesystem being mounted at /81/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 61.937079][ T5064] loop2: detected capacity change from 0 to 2048 [ 61.971005][ T5064] xt_CT: You must specify a L4 protocol and not use inversions on it [ 61.971537][ T5064] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 61.995244][ T5064] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 62.007565][ T5064] EXT4-fs (loop2): This should not happen!! Data will be lost [ 62.007565][ T5064] [ 62.017260][ T5064] EXT4-fs (loop2): Total free blocks count 0 [ 62.023385][ T5064] EXT4-fs (loop2): Free/Dirty block details [ 62.029300][ T5064] EXT4-fs (loop2): free_blocks=2415919104 [ 62.035058][ T5064] EXT4-fs (loop2): dirty_blocks=16 [ 62.040204][ T5064] EXT4-fs (loop2): Block reservation details [ 62.046265][ T5064] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 62.074157][ T5068] hub 9-0:1.0: USB hub found [ 62.079374][ T5068] hub 9-0:1.0: 8 ports detected [ 62.408359][ T5081] netlink: 256 bytes leftover after parsing attributes in process `syz.4.491'. [ 62.487172][ T5081] loop4: detected capacity change from 0 to 1024 [ 62.499835][ T5081] EXT4-fs: Ignoring removed oldalloc option [ 62.505968][ T5081] ext4: Unknown parameter 'smackfsdef' [ 62.533791][ T3387] EXT4-fs error (device loop0): ext4_release_dquot:6902: comm kworker/u8:7: Failed to release dquot type 1 [ 62.582420][ T5081] xt_TPROXY: Can be used only with -p tcp or -p udp [ 62.591380][ T5099] FAULT_INJECTION: forcing a failure. [ 62.591380][ T5099] name failslab, interval 1, probability 0, space 0, times 0 [ 62.604144][ T5099] CPU: 1 UID: 0 PID: 5099 Comm: syz.1.499 Tainted: G W 6.12.0-rc2-syzkaller-00058-g75b607fab38d #0 [ 62.616328][ T5099] Tainted: [W]=WARN [ 62.620154][ T5099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 62.630231][ T5099] Call Trace: [ 62.633522][ T5099] [ 62.636464][ T5099] dump_stack_lvl+0xf2/0x150 [ 62.641076][ T5099] dump_stack+0x15/0x20 [ 62.645254][ T5099] should_fail_ex+0x223/0x230 [ 62.649974][ T5099] ? __kvmalloc_node_noprof+0x72/0x170 [ 62.655606][ T5099] should_failslab+0x8f/0xb0 [ 62.656261][ T5106] loop4: detected capacity change from 0 to 2048 [ 62.660241][ T5099] __kmalloc_node_noprof+0xa8/0x380 [ 62.660327][ T5099] __kvmalloc_node_noprof+0x72/0x170 [ 62.660357][ T5099] xt_alloc_table_info+0x3d/0x80 [ 62.660386][ T5099] do_arpt_set_ctl+0x683/0xa20 [ 62.686947][ T5099] ? tcp_release_cb+0xfe/0x380 [ 62.691728][ T5099] ? _raw_spin_unlock_bh+0x36/0x40 [ 62.696909][ T5099] nf_setsockopt+0x195/0x1b0 [ 62.701581][ T5099] ip_setsockopt+0xea/0x100 [ 62.706099][ T5099] tcp_setsockopt+0x93/0xb0 [ 62.710619][ T5099] sock_common_setsockopt+0x64/0x80 [ 62.715880][ T5099] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 62.721784][ T5099] smc_setsockopt+0x182/0x7a0 [ 62.726481][ T5099] ? __pfx_smc_setsockopt+0x10/0x10 [ 62.731714][ T5099] __sys_setsockopt+0x1cc/0x240 [ 62.736702][ T5099] __x64_sys_setsockopt+0x66/0x80 [ 62.741773][ T5099] x64_sys_call+0x278d/0x2d60 [ 62.746464][ T5099] do_syscall_64+0xc9/0x1c0 [ 62.750989][ T5099] ? clear_bhb_loop+0x55/0xb0 [ 62.755706][ T5099] ? clear_bhb_loop+0x55/0xb0 [ 62.760401][ T5099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.766310][ T5099] RIP: 0033:0x7fc3875adff9 [ 62.770758][ T5099] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.790571][ T5099] RSP: 002b:00007fc386227038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 62.798999][ T5099] RAX: ffffffffffffffda RBX: 00007fc387765f80 RCX: 00007fc3875adff9 [ 62.807110][ T5099] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 62.815085][ T5099] RBP: 00007fc386227090 R08: 00000000000003f8 R09: 0000000000000000 [ 62.823062][ T5099] R10: 0000000020000800 R11: 0000000000000246 R12: 0000000000000001 [ 62.831050][ T5099] R13: 0000000000000000 R14: 00007fc387765f80 R15: 00007ffd00b9bd98 [ 62.839072][ T5099] [ 62.900070][ T5106] xt_CT: You must specify a L4 protocol and not use inversions on it [ 62.900783][ T5106] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 62.923802][ T5106] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 62.936104][ T5106] EXT4-fs (loop4): This should not happen!! Data will be lost [ 62.936104][ T5106] [ 62.945813][ T5106] EXT4-fs (loop4): Total free blocks count 0 [ 62.951984][ T5106] EXT4-fs (loop4): Free/Dirty block details [ 62.957929][ T5106] EXT4-fs (loop4): free_blocks=2415919104 [ 62.963695][ T5106] EXT4-fs (loop4): dirty_blocks=16 [ 62.968825][ T5106] EXT4-fs (loop4): Block reservation details [ 62.974905][ T5106] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 62.992752][ T5119] loop3: detected capacity change from 0 to 136 [ 63.043544][ T5128] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 63.044642][ T5130] FAULT_INJECTION: forcing a failure. [ 63.044642][ T5130] name failslab, interval 1, probability 0, space 0, times 0 [ 63.063697][ T5130] CPU: 0 UID: 0 PID: 5130 Comm: syz.4.511 Tainted: G W 6.12.0-rc2-syzkaller-00058-g75b607fab38d #0 [ 63.075778][ T5130] Tainted: [W]=WARN [ 63.079622][ T5130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 63.089804][ T5130] Call Trace: [ 63.093112][ T5130] [ 63.096070][ T5130] dump_stack_lvl+0xf2/0x150 [ 63.100697][ T5130] dump_stack+0x15/0x20 [ 63.104868][ T5130] should_fail_ex+0x223/0x230 [ 63.109584][ T5130] ? sidtab_sid2str_get+0xb8/0x140 [ 63.114794][ T5130] should_failslab+0x8f/0xb0 [ 63.119476][ T5130] __kmalloc_node_track_caller_noprof+0xa6/0x380 [ 63.125828][ T5130] ? vsnprintf+0xdd8/0xe30 [ 63.130267][ T5130] kmemdup_noprof+0x2a/0x60 [ 63.134849][ T5130] sidtab_sid2str_get+0xb8/0x140 [ 63.139809][ T5130] security_sid_to_context_core+0x1eb/0x2f0 [ 63.145747][ T5130] security_sid_to_context+0x27/0x30 [ 63.151067][ T5130] selinux_secid_to_secctx+0x22/0x30 [ 63.156403][ T5130] security_secid_to_secctx+0x48/0x90 [ 63.161868][ T5130] audit_log_task_context+0x8c/0x1b0 [ 63.167202][ T5130] audit_log_task+0xfb/0x180 [ 63.171795][ T5130] audit_seccomp+0x68/0x130 [ 63.176303][ T5130] __seccomp_filter+0x6fa/0x1180 [ 63.181308][ T5130] ? mntput_no_expire+0x70/0x3c0 [ 63.186425][ T5130] ? mntput+0x49/0x70 [ 63.190427][ T5130] __secure_computing+0x9f/0x1c0 [ 63.195433][ T5130] syscall_trace_enter+0xd1/0x1f0 [ 63.200468][ T5130] ? fpregs_assert_state_consistent+0x83/0xa0 [ 63.206560][ T5130] do_syscall_64+0xaa/0x1c0 [ 63.209454][ T5128] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 63.211056][ T5130] ? clear_bhb_loop+0x55/0xb0 [ 63.222784][ T5130] ? clear_bhb_loop+0x55/0xb0 [ 63.227527][ T5130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.233523][ T5130] RIP: 0033:0x7fd4be17ca3c [ 63.237952][ T5130] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 63.246635][ T5134] netlink: 256 bytes leftover after parsing attributes in process `syz.3.513'. [ 63.257563][ T5130] RSP: 002b:00007fd4bcdf7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 63.257592][ T5130] RAX: ffffffffffffffda RBX: 00007fd4be335f80 RCX: 00007fd4be17ca3c [ 63.257608][ T5130] RDX: 000000000000000f RSI: 00007fd4bcdf70a0 RDI: 0000000000000006 [ 63.289555][ T5134] loop3: detected capacity change from 0 to 1024 [ 63.290976][ T5130] RBP: 00007fd4bcdf7090 R08: 0000000000000000 R09: 0000000000000000 [ 63.290996][ T5130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 63.298949][ T5134] EXT4-fs: Ignoring removed oldalloc option [ 63.305307][ T5130] R13: 0000000000000000 R14: 00007fd4be335f80 R15: 00007ffc36ed7c88 [ 63.305378][ T5130] [ 63.319083][ T5134] ext4: Unknown parameter 'smackfsdef' [ 63.357234][ T5138] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 63.360054][ T5134] xt_TPROXY: Can be used only with -p tcp or -p udp [ 63.363800][ T5138] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 63.363876][ T5138] vhci_hcd vhci_hcd.0: Device attached [ 63.366474][ T5139] usbip_core: unknown command [ 63.388344][ T5139] vhci_hcd: unknown pdu 0 [ 63.390242][ T5142] syz.3.515 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 63.392709][ T5139] usbip_core: unknown command [ 63.447018][ T5146] netlink: 8 bytes leftover after parsing attributes in process `syz.2.517'. [ 63.466222][ T57] vhci_hcd: stop threads [ 63.470580][ T57] vhci_hcd: release socket [ 63.475033][ T57] vhci_hcd: disconnect device [ 63.537158][ T5157] loop2: detected capacity change from 0 to 2048 [ 63.584995][ T5157] xt_CT: You must specify a L4 protocol and not use inversions on it [ 63.585672][ T5157] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, [ 63.588687][ T5168] loop3: detected capacity change from 0 to 1024 [ 63.593857][ T5157] block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 63.602050][ T5157] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 63.629768][ T5157] EXT4-fs (loop2): This should not happen!! Data will be lost [ 63.629768][ T5157] [ 63.630895][ T5168] EXT4-fs: Ignoring removed oldalloc option [ 63.639448][ T5157] EXT4-fs (loop2): Total free blocks count 0 [ 63.639467][ T5157] EXT4-fs (loop2): Free/Dirty block details [ 63.655781][ T5168] ext4: Unknown parameter 'smackfsdef' [ 63.657356][ T5157] EXT4-fs (loop2): free_blocks=2415919104 [ 63.668663][ T5157] EXT4-fs (loop2): dirty_blocks=16 [ 63.674136][ T5157] EXT4-fs (loop2): Block reservation details [ 63.680319][ T5157] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 63.705867][ T5168] xt_TPROXY: Can be used only with -p tcp or -p udp [ 63.750221][ T5176] loop3: detected capacity change from 0 to 512 [ 63.759652][ T5176] EXT4-fs warning (device loop3): read_mmp_block:115: Error -117 while reading MMP block 0 [ 63.796447][ T5181] loop3: detected capacity change from 0 to 512 [ 63.810318][ T5181] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 63.844756][ T5185] loop2: detected capacity change from 0 to 512 [ 63.851976][ T5185] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 63.863075][ T5181] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.532: bg 0: block 248: padding at end of block bitmap is not set [ 63.863302][ T5181] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.532: Failed to acquire dquot type 1 [ 63.863866][ T5181] EXT4-fs (loop3): 1 truncate cleaned up [ 63.891477][ T5185] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.534: bg 0: block 248: padding at end of block bitmap is not set [ 63.895329][ T5181] ext4 filesystem being mounted at /95/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 63.911167][ T5185] EXT4-fs error (device loop2): ext4_acquire_dquot:6879: comm syz.2.534: Failed to acquire dquot type 1 [ 63.931045][ T5185] EXT4-fs (loop2): 1 truncate cleaned up [ 63.937372][ T5185] ext4 filesystem being mounted at /66/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 65.259309][ T5202] hub 9-0:1.0: USB hub found [ 65.264089][ T5202] hub 9-0:1.0: 8 ports detected [ 65.729886][ T5204] hub 9-0:1.0: USB hub found [ 65.734726][ T5204] hub 9-0:1.0: 8 ports detected [ 65.966468][ T5209] loop0: detected capacity change from 0 to 1024 [ 65.993205][ T5209] EXT4-fs: Ignoring removed oldalloc option [ 66.325030][ T5211] loop4: detected capacity change from 0 to 2048 [ 66.331651][ T36] __quota_error: 108 callbacks suppressed [ 66.331667][ T36] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-5 [ 66.346542][ T36] EXT4-fs error (device loop3): ext4_release_dquot:6902: comm kworker/u8:2: Failed to release dquot type 1 [ 66.360216][ T5209] ext4: Unknown parameter 'smackfsdef' [ 66.502245][ T5215] xt_TPROXY: Can be used only with -p tcp or -p udp [ 66.513556][ T5211] xt_CT: You must specify a L4 protocol and not use inversions on it [ 66.515966][ T5211] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 66.542041][ T36] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-5 [ 66.551092][ T36] EXT4-fs error (device loop2): ext4_release_dquot:6902: comm kworker/u8:2: Failed to release dquot type 1 [ 66.648584][ T5211] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 66.661008][ T5211] EXT4-fs (loop4): This should not happen!! Data will be lost [ 66.661008][ T5211] [ 66.670702][ T5211] EXT4-fs (loop4): Total free blocks count 0 [ 66.676702][ T5211] EXT4-fs (loop4): Free/Dirty block details [ 66.682737][ T5211] EXT4-fs (loop4): free_blocks=2415919104 [ 66.688550][ T5211] EXT4-fs (loop4): dirty_blocks=16 [ 66.693715][ T5211] EXT4-fs (loop4): Block reservation details [ 66.699766][ T5211] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 66.795630][ T5226] loop2: detected capacity change from 0 to 512 [ 66.803005][ T5226] EXT4-fs warning (device loop2): read_mmp_block:115: Error -117 while reading MMP block 0 [ 66.826668][ T5228] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 66.833295][ T5228] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 66.840990][ T5228] vhci_hcd vhci_hcd.0: Device attached [ 66.868600][ T5229] usbip_core: unknown command [ 66.873476][ T5229] vhci_hcd: unknown pdu 0 [ 66.877826][ T5229] usbip_core: unknown command [ 67.004950][ T5244] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 67.016191][ T29] audit: type=1326 audit(1728513763.442:1067): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5241 comm="syz.1.548" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc3875adff9 code=0x0 [ 67.044991][ T1918] vhci_hcd: stop threads [ 67.049318][ T1918] vhci_hcd: release socket [ 67.053788][ T1918] vhci_hcd: disconnect device [ 67.099276][ T24] usb 7-1: new high-speed USB device number 2 using vhci_hcd [ 67.107042][ T24] usb 7-1: enqueue for inactive port 0 [ 67.115947][ T24] usb 7-1: enqueue for inactive port 0 [ 67.121931][ T24] usb 7-1: enqueue for inactive port 0 [ 67.199308][ T24] vhci_hcd: vhci_device speed not set [ 67.215790][ T29] audit: type=1326 audit(1728513763.632:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5251 comm="syz.1.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3875adff9 code=0x7ffc0000 [ 67.239396][ T29] audit: type=1326 audit(1728513763.632:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5251 comm="syz.1.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3875adff9 code=0x7ffc0000 [ 67.262952][ T29] audit: type=1326 audit(1728513763.632:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5251 comm="syz.1.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc3875adff9 code=0x7ffc0000 [ 67.286403][ T29] audit: type=1326 audit(1728513763.632:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5251 comm="syz.1.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3875adff9 code=0x7ffc0000 [ 67.310039][ T29] audit: type=1326 audit(1728513763.632:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5251 comm="syz.1.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc3875adff9 code=0x7ffc0000 [ 67.333495][ T29] audit: type=1326 audit(1728513763.632:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5251 comm="syz.1.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3875adff9 code=0x7ffc0000 [ 67.356916][ T29] audit: type=1326 audit(1728513763.632:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5251 comm="syz.1.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7fc3875adff9 code=0x7ffc0000 [ 67.381073][ T5246] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 67.416291][ T5260] FAULT_INJECTION: forcing a failure. [ 67.416291][ T5260] name failslab, interval 1, probability 0, space 0, times 0 [ 67.429006][ T5260] CPU: 1 UID: 0 PID: 5260 Comm: syz.4.554 Tainted: G W 6.12.0-rc2-syzkaller-00058-g75b607fab38d #0 [ 67.441160][ T5260] Tainted: [W]=WARN [ 67.445036][ T5260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 67.455099][ T5260] Call Trace: [ 67.458378][ T5260] [ 67.461341][ T5260] dump_stack_lvl+0xf2/0x150 [ 67.465941][ T5260] dump_stack+0x15/0x20 [ 67.470103][ T5260] should_fail_ex+0x223/0x230 [ 67.474820][ T5260] ? nf_nat_masq_schedule+0x183/0x360 [ 67.480252][ T5260] should_failslab+0x8f/0xb0 [ 67.484969][ T5260] __kmalloc_cache_noprof+0x4b/0x2a0 [ 67.490289][ T5260] ? nf_tables_netdev_event+0x3bd/0x400 [ 67.495877][ T5260] nf_nat_masq_schedule+0x183/0x360 [ 67.501084][ T5260] ? __pfx_device_cmp+0x10/0x10 [ 67.505947][ T5260] ? __pfx_masq_device_event+0x10/0x10 [ 67.511418][ T5260] masq_device_event+0x71/0x90 [ 67.516264][ T5260] raw_notifier_call_chain+0x6f/0x1d0 [ 67.521715][ T5260] call_netdevice_notifiers_info+0xae/0x100 [ 67.527622][ T5260] __dev_notify_flags+0xff/0x1a0 [ 67.532641][ T5260] dev_change_flags+0xab/0xd0 [ 67.537374][ T5260] dev_ifsioc+0x67f/0xa10 [ 67.541782][ T5260] dev_ioctl+0x7fa/0xab0 [ 67.546039][ T5260] sock_do_ioctl+0x11c/0x260 [ 67.550703][ T5260] sock_ioctl+0x46a/0x640 [ 67.555039][ T5260] ? __pfx_sock_ioctl+0x10/0x10 [ 67.559956][ T5260] __se_sys_ioctl+0xcd/0x140 [ 67.564603][ T5260] __x64_sys_ioctl+0x43/0x50 [ 67.569222][ T5260] x64_sys_call+0x15cc/0x2d60 [ 67.573915][ T5260] do_syscall_64+0xc9/0x1c0 [ 67.578526][ T5260] ? clear_bhb_loop+0x55/0xb0 [ 67.583283][ T5260] ? clear_bhb_loop+0x55/0xb0 [ 67.588036][ T5260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.593950][ T5260] RIP: 0033:0x7fd4be17dff9 [ 67.598384][ T5260] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.618012][ T5260] RSP: 002b:00007fd4bcdf7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 67.626431][ T5260] RAX: ffffffffffffffda RBX: 00007fd4be335f80 RCX: 00007fd4be17dff9 [ 67.634406][ T5260] RDX: 0000000020000280 RSI: 0000000000008914 RDI: 0000000000000004 [ 67.642402][ T5260] RBP: 00007fd4bcdf7090 R08: 0000000000000000 R09: 0000000000000000 [ 67.650403][ T5260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.658417][ T5260] R13: 0000000000000000 R14: 00007fd4be335f80 R15: 00007ffc36ed7c88 [ 67.666500][ T5260] [ 67.802699][ T5275] loop0: detected capacity change from 0 to 512 [ 67.824681][ T5279] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 67.830768][ T5280] netlink: 84 bytes leftover after parsing attributes in process `syz.3.564'. [ 67.845840][ T5275] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 67.874002][ T5280] loop3: detected capacity change from 0 to 2048 [ 67.880351][ T5275] EXT4-fs (loop0): 1 truncate cleaned up [ 67.880793][ T5275] EXT4-fs mount: 16 callbacks suppressed [ 67.880836][ T5275] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.989748][ T5279] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 68.140802][ T57] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.186041][ T5308] netlink: 12 bytes leftover after parsing attributes in process `syz.1.575'. [ 68.199868][ T57] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.262727][ T57] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.274694][ T5318] FAULT_INJECTION: forcing a failure. [ 68.274694][ T5318] name failslab, interval 1, probability 0, space 0, times 0 [ 68.287472][ T5318] CPU: 1 UID: 0 PID: 5318 Comm: syz.1.577 Tainted: G W 6.12.0-rc2-syzkaller-00058-g75b607fab38d #0 [ 68.299554][ T5318] Tainted: [W]=WARN [ 68.303423][ T5318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 68.313491][ T5318] Call Trace: [ 68.316845][ T5318] [ 68.319794][ T5318] dump_stack_lvl+0xf2/0x150 [ 68.324432][ T5318] dump_stack+0x15/0x20 [ 68.328690][ T5318] should_fail_ex+0x223/0x230 [ 68.333439][ T5318] ? __alloc_skb+0x10b/0x310 [ 68.338054][ T5318] should_failslab+0x8f/0xb0 [ 68.342695][ T5318] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 68.348619][ T5318] __alloc_skb+0x10b/0x310 [ 68.353141][ T5318] audit_log_start+0x368/0x6b0 [ 68.357940][ T5318] audit_seccomp+0x4b/0x130 [ 68.362597][ T5318] __seccomp_filter+0x6fa/0x1180 [ 68.367589][ T5318] ? proc_fail_nth_write+0x12a/0x150 [ 68.372895][ T5318] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 68.378578][ T5318] ? vfs_write+0x580/0x910 [ 68.383067][ T5318] ? __fget_files+0x1d4/0x210 [ 68.387842][ T5318] __secure_computing+0x9f/0x1c0 [ 68.392797][ T5318] syscall_trace_enter+0xd1/0x1f0 [ 68.397867][ T5318] ? fpregs_assert_state_consistent+0x83/0xa0 [ 68.404098][ T5318] do_syscall_64+0xaa/0x1c0 [ 68.408711][ T5318] ? clear_bhb_loop+0x55/0xb0 [ 68.413399][ T5318] ? clear_bhb_loop+0x55/0xb0 [ 68.418167][ T5318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.424143][ T5318] RIP: 0033:0x7fc3875adff9 [ 68.428567][ T5318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.448240][ T5318] RSP: 002b:00007fc386227038 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 68.456721][ T5318] RAX: ffffffffffffffda RBX: 00007fc387765f80 RCX: 00007fc3875adff9 [ 68.464813][ T5318] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 68.472792][ T5318] RBP: 00007fc386227090 R08: 0000000000000000 R09: 0000000000000000 [ 68.480811][ T5318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.488863][ T5318] R13: 0000000000000000 R14: 00007fc387765f80 R15: 00007ffd00b9bd98 [ 68.496925][ T5318] [ 68.567290][ T3662] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.611406][ T5323] veth0_vlan: left promiscuous mode [ 68.617443][ T5323] veth0_vlan: entered promiscuous mode [ 68.636309][ T5330] loop0: detected capacity change from 0 to 512 [ 68.657047][ T57] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.672784][ T5330] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 68.675706][ T5301] chnl_net:caif_netlink_parms(): no params data found [ 68.697983][ T5330] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.581: bg 0: block 248: padding at end of block bitmap is not set [ 68.719684][ T5330] EXT4-fs error (device loop0): ext4_acquire_dquot:6879: comm syz.0.581: Failed to acquire dquot type 1 [ 68.733343][ T5330] EXT4-fs (loop0): 1 truncate cleaned up [ 68.741469][ T5330] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.757961][ T5330] ext4 filesystem being mounted at /93/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 68.781926][ T5346] FAULT_INJECTION: forcing a failure. [ 68.781926][ T5346] name failslab, interval 1, probability 0, space 0, times 0 [ 68.794644][ T5346] CPU: 0 UID: 0 PID: 5346 Comm: syz.4.586 Tainted: G W 6.12.0-rc2-syzkaller-00058-g75b607fab38d #0 [ 68.806826][ T5346] Tainted: [W]=WARN [ 68.810710][ T5346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 68.820830][ T5346] Call Trace: [ 68.820840][ T5346] [ 68.820850][ T5346] dump_stack_lvl+0xf2/0x150 [ 68.831668][ T5346] dump_stack+0x15/0x20 [ 68.835901][ T5346] should_fail_ex+0x223/0x230 [ 68.840620][ T5346] ? __get_vm_area_node+0xf7/0x1b0 [ 68.845743][ T5346] should_failslab+0x8f/0xb0 [ 68.850388][ T5346] __kmalloc_cache_node_noprof+0x50/0x2b0 [ 68.856130][ T5346] ? cgroup_rstat_updated+0x99/0x550 [ 68.861447][ T5346] __get_vm_area_node+0xf7/0x1b0 [ 68.866397][ T5346] __vmalloc_node_range_noprof+0x2c3/0xec0 [ 68.872214][ T5346] ? copy_process+0x3a9/0x1f90 [ 68.877066][ T5346] ? mod_objcg_state+0x3a7/0x4f0 [ 68.882033][ T5346] dup_task_struct+0x4a1/0x710 [ 68.886809][ T5346] ? copy_process+0x3a9/0x1f90 [ 68.891599][ T5346] copy_process+0x3a9/0x1f90 [ 68.896201][ T5346] ? kstrtouint+0x77/0xc0 [ 68.900577][ T5346] ? kstrtouint_from_user+0xb0/0xe0 [ 68.905868][ T5346] ? 0xffffffff81000000 [ 68.910080][ T5346] kernel_clone+0x167/0x5e0 [ 68.914632][ T5346] ? vfs_write+0x580/0x910 [ 68.919103][ T5346] __x64_sys_clone+0xe8/0x120 [ 68.923810][ T5346] x64_sys_call+0x2d23/0x2d60 [ 68.928567][ T5346] do_syscall_64+0xc9/0x1c0 [ 68.933076][ T5346] ? clear_bhb_loop+0x55/0xb0 [ 68.937769][ T5346] ? clear_bhb_loop+0x55/0xb0 [ 68.942527][ T5346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.948440][ T5346] RIP: 0033:0x7fd4be17dff9 [ 68.952860][ T5346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.972508][ T5346] RSP: 002b:00007fd4bcdf6fe8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 68.980940][ T5346] RAX: ffffffffffffffda RBX: 00007fd4be335f80 RCX: 00007fd4be17dff9 [ 68.988978][ T5346] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002202341f [ 68.996964][ T5346] RBP: 00007fd4bcdf7090 R08: 0000000000000000 R09: 0000000000000000 [ 69.004986][ T5346] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 69.013000][ T5346] R13: 0000000000000000 R14: 00007fd4be335f80 R15: 00007ffc36ed7c88 [ 69.020984][ T5346] [ 69.024241][ T5346] syz.4.586: vmalloc error: size 16384, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 69.039031][ T5346] CPU: 0 UID: 0 PID: 5346 Comm: syz.4.586 Tainted: G W 6.12.0-rc2-syzkaller-00058-g75b607fab38d #0 [ 69.051189][ T5346] Tainted: [W]=WARN [ 69.054990][ T5346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 69.065052][ T5346] Call Trace: [ 69.068338][ T5346] [ 69.071272][ T5346] dump_stack_lvl+0xf2/0x150 [ 69.075990][ T5346] dump_stack+0x15/0x20 [ 69.080152][ T5346] warn_alloc+0x145/0x1b0 [ 69.084664][ T5346] ? cgroup_rstat_updated+0x99/0x550 [ 69.090000][ T5346] __vmalloc_node_range_noprof+0x2e8/0xec0 [ 69.095844][ T5346] ? mod_objcg_state+0x3a7/0x4f0 [ 69.100825][ T5346] dup_task_struct+0x4a1/0x710 [ 69.105605][ T5346] ? copy_process+0x3a9/0x1f90 [ 69.110383][ T5346] copy_process+0x3a9/0x1f90 [ 69.114984][ T5346] ? kstrtouint+0x77/0xc0 [ 69.119338][ T5346] ? kstrtouint_from_user+0xb0/0xe0 [ 69.124562][ T5346] ? 0xffffffff81000000 [ 69.128762][ T5346] kernel_clone+0x167/0x5e0 [ 69.133396][ T5346] ? vfs_write+0x580/0x910 [ 69.137952][ T5346] __x64_sys_clone+0xe8/0x120 [ 69.142674][ T5346] x64_sys_call+0x2d23/0x2d60 [ 69.147376][ T5346] do_syscall_64+0xc9/0x1c0 [ 69.151943][ T5346] ? clear_bhb_loop+0x55/0xb0 [ 69.156645][ T5346] ? clear_bhb_loop+0x55/0xb0 [ 69.161378][ T5346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.167330][ T5346] RIP: 0033:0x7fd4be17dff9 [ 69.171759][ T5346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.191431][ T5346] RSP: 002b:00007fd4bcdf6fe8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 69.200118][ T5346] RAX: ffffffffffffffda RBX: 00007fd4be335f80 RCX: 00007fd4be17dff9 [ 69.208158][ T5346] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002202341f [ 69.216162][ T5346] RBP: 00007fd4bcdf7090 R08: 0000000000000000 R09: 0000000000000000 [ 69.224175][ T5346] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 69.232237][ T5346] R13: 0000000000000000 R14: 00007fd4be335f80 R15: 00007ffc36ed7c88 [ 69.240251][ T5346] [ 69.243403][ T5346] Mem-Info: [ 69.246621][ T5346] active_anon:4397 inactive_anon:0 isolated_anon:0 [ 69.246621][ T5346] active_file:14019 inactive_file:1945 isolated_file:0 [ 69.246621][ T5346] unevictable:0 dirty:242 writeback:2 [ 69.246621][ T5346] slab_reclaimable:2589 slab_unreclaimable:15391 [ 69.246621][ T5346] mapped:21181 shmem:539 pagetables:741 [ 69.246621][ T5346] sec_pagetables:0 bounce:0 [ 69.246621][ T5346] kernel_misc_reclaimable:0 [ 69.246621][ T5346] free:1904852 free_pcp:11536 free_cma:0 [ 69.291949][ T5346] Node 0 active_anon:17588kB inactive_anon:0kB active_file:56076kB inactive_file:7780kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:84724kB dirty:968kB writeback:8kB shmem:2156kB writeback_tmp:0kB kernel_stack:3136kB pagetables:2964kB sec_pagetables:0kB all_unreclaimable? no [ 69.319885][ T5346] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 69.346910][ T5346] lowmem_reserve[]: 0 2866 7844 0 [ 69.348538][ T5352] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 69.351993][ T5346] Node 0 DMA32 free:2950372kB boost:0kB min:4136kB low:7068kB high:10000kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953904kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:3532kB free_cma:0kB [ 69.377370][ T5350] capability: warning: `syz.1.588' uses deprecated v2 capabilities in a way that may be insecure [ 69.387892][ T5346] lowmem_reserve[]: 0 0 4978 0 [ 69.403370][ T5346] Node 0 Normal free:4653676kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:17588kB inactive_anon:0kB active_file:56076kB inactive_file:7780kB unevictable:0kB writepending:976kB present:5242880kB managed:5098208kB mlocked:0kB bounce:0kB free_pcp:42496kB local_pcp:24212kB free_cma:0kB [ 69.406828][ T5350] program syz.1.588 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 69.433843][ T5346] lowmem_reserve[]: 0 0 0 0 [ 69.433881][ T5346] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 69.434052][ T5346] Node 0 DMA32: 3*4kB (M) 1*8kB (M) 3*16kB (M) 5*32kB (M) 2*64kB (M) 3*128kB (M) 2*256kB (M) 2*512kB (M) 3*1024kB (M) 2*2048kB (M) 718*4096kB (M) = 2950372kB [ 69.434387][ T5346] Node 0 Normal: 1*4kB (M) 3*8kB (E) 151*16kB (M) 47*32kB (M) 162*64kB (ME) 49*128kB (ME) 40*256kB (UME) 23*512kB (ME) 31*1024kB (UM) 4*2048kB (UM) 1116*4096kB (UM) = 4653676kB [ 69.495247][ T5346] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 69.504561][ T5346] 16513 total pagecache pages [ 69.509276][ T5346] 0 pages in swap cache [ 69.513457][ T5346] Free swap = 124476kB [ 69.518060][ T5346] Total swap = 124996kB [ 69.522260][ T5346] 2097051 pages RAM [ 69.526114][ T5346] 0 pages HighMem/MovableOnly [ 69.530844][ T5346] 80183 pages reserved [ 69.543852][ T5301] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.550988][ T5301] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.558135][ T5301] bridge_slave_0: entered allmulticast mode [ 69.564774][ T5301] bridge_slave_0: entered promiscuous mode [ 69.585590][ T5301] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.592720][ T5301] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.601468][ T5301] bridge_slave_1: entered allmulticast mode [ 69.608174][ T5301] bridge_slave_1: entered promiscuous mode [ 69.635843][ T5301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.646705][ T5353] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 69.683526][ T57] bridge_slave_1: left allmulticast mode [ 69.689380][ T57] bridge_slave_1: left promiscuous mode [ 69.695150][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.706178][ T57] bridge_slave_0: left allmulticast mode [ 69.711902][ T57] bridge_slave_0: left promiscuous mode [ 69.717532][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.873590][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 69.886715][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 70.011945][ T57] bond0 (unregistering): Released all slaves [ 70.028293][ T5301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.054359][ T5301] team0: Port device team_slave_0 added [ 70.064254][ T5301] team0: Port device team_slave_1 added [ 70.091444][ T3662] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.135088][ T50] EXT4-fs error (device loop0): ext4_release_dquot:6902: comm kworker/u8:3: Failed to release dquot type 1 [ 70.169428][ T57] hsr_slave_0: left promiscuous mode [ 70.177208][ T57] hsr_slave_1: left promiscuous mode [ 70.192142][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.199650][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.243686][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.251320][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.263444][ T5384] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 70.274857][ T57] veth1_macvtap: left promiscuous mode [ 70.280455][ T57] veth0_macvtap: left promiscuous mode [ 70.286034][ T57] veth1_vlan: left promiscuous mode [ 70.291307][ T57] veth0_vlan: left promiscuous mode [ 70.336281][ T5390] loop4: detected capacity change from 0 to 2048 [ 70.356361][ T5390] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.365211][ T5392] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 70.391807][ T5390] xt_CT: You must specify a L4 protocol and not use inversions on it [ 70.394517][ T5390] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 70.419131][ T5390] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 70.431399][ T5390] EXT4-fs (loop4): This should not happen!! Data will be lost [ 70.431399][ T5390] [ 70.441084][ T5390] EXT4-fs (loop4): Total free blocks count 0 [ 70.447090][ T5390] EXT4-fs (loop4): Free/Dirty block details [ 70.453052][ T5390] EXT4-fs (loop4): free_blocks=2415919104 [ 70.458848][ T5390] EXT4-fs (loop4): dirty_blocks=16 [ 70.464062][ T5390] EXT4-fs (loop4): Block reservation details [ 70.470099][ T5390] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 70.489591][ T3270] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.511724][ T57] team0 (unregistering): Port device team_slave_1 removed [ 70.524387][ T57] team0 (unregistering): Port device team_slave_0 removed [ 70.633715][ T5301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.640892][ T5301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.640929][ T5301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.643953][ T5301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.685343][ T5301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.711664][ T5301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.759351][ T5392] netlink: 'syz.0.602': attribute type 10 has an invalid length. [ 70.792495][ T5424] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 70.850029][ T5428] loop2: detected capacity change from 0 to 2048 [ 70.882704][ T5428] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.883797][ T5301] hsr_slave_0: entered promiscuous mode [ 70.901740][ T5301] hsr_slave_1: entered promiscuous mode [ 70.907738][ T5301] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.915371][ T5301] Cannot create hsr debugfs directory [ 70.942161][ T5428] xt_CT: You must specify a L4 protocol and not use inversions on it [ 70.947160][ T5428] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 70.975511][ T5428] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 70.987759][ T5428] EXT4-fs (loop2): This should not happen!! Data will be lost [ 70.987759][ T5428] [ 70.997443][ T5428] EXT4-fs (loop2): Total free blocks count 0 [ 71.003467][ T5428] EXT4-fs (loop2): Free/Dirty block details [ 71.009403][ T5428] EXT4-fs (loop2): free_blocks=2415919104 [ 71.015210][ T5428] EXT4-fs (loop2): dirty_blocks=16 [ 71.020377][ T5428] EXT4-fs (loop2): Block reservation details [ 71.026370][ T5428] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 71.043455][ T5435] netlink: 256 bytes leftover after parsing attributes in process `syz.4.613'. [ 71.067866][ T5435] loop4: detected capacity change from 0 to 1024 [ 71.095737][ T5435] EXT4-fs: Ignoring removed oldalloc option [ 71.108571][ T3760] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.113859][ T5435] ext4: Unknown parameter 'smackfsdef' [ 71.188170][ T5435] xt_TPROXY: Can be used only with -p tcp or -p udp [ 71.346680][ T5467] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 71.357457][ T5471] netlink: 256 bytes leftover after parsing attributes in process `syz.4.620'. [ 71.381831][ T5466] loop7: detected capacity change from 0 to 7 [ 71.388218][ T5466] Buffer I/O error on dev loop7, logical block 0, async page read [ 71.392891][ T5474] loop2: detected capacity change from 0 to 512 [ 71.396203][ T5466] Buffer I/O error on dev loop7, logical block 0, async page read [ 71.410278][ T5466] loop7: unable to read partition table [ 71.418105][ T5466] loop_reread_partitions: partition scan of loop7 (被xڬdƤݡ [ 71.418105][ T5466] ) failed (rc=-5) [ 71.424019][ T5478] loop4: detected capacity change from 0 to 1024 [ 71.450330][ T5478] EXT4-fs: Ignoring removed oldalloc option [ 71.457835][ T5474] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 71.461133][ T5477] loop0: detected capacity change from 0 to 1024 [ 71.468133][ T5478] ext4: Unknown parameter 'smackfsdef' [ 71.477131][ T5477] EXT4-fs: Ignoring removed oldalloc option [ 71.488043][ T5477] ext4: Unknown parameter 'smackfsdef' [ 71.522321][ T5471] xt_TPROXY: Can be used only with -p tcp or -p udp [ 71.586604][ T5474] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.622: bg 0: block 248: padding at end of block bitmap is not set [ 71.608556][ T5477] xt_TPROXY: Can be used only with -p tcp or -p udp [ 71.616742][ T5474] __quota_error: 267 callbacks suppressed [ 71.616759][ T5474] Quota error (device loop2): write_blk: dquota write failed [ 71.629956][ T5474] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 71.639961][ T5474] EXT4-fs error (device loop2): ext4_acquire_dquot:6879: comm syz.2.622: Failed to acquire dquot type 1 [ 71.656297][ T29] audit: type=1326 audit(1728513768.082:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5491 comm="syz.4.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4be17dff9 code=0x7ffc0000 [ 71.669159][ T5474] EXT4-fs (loop2): 1 truncate cleaned up [ 71.679781][ T29] audit: type=1326 audit(1728513768.082:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5491 comm="syz.4.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4be17dff9 code=0x7ffc0000 [ 71.679814][ T29] audit: type=1326 audit(1728513768.082:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5491 comm="syz.4.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4be17dff9 code=0x7ffc0000 [ 71.687349][ T5474] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.708987][ T29] audit: type=1326 audit(1728513768.082:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5491 comm="syz.4.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4be17dff9 code=0x7ffc0000 [ 71.709025][ T29] audit: type=1326 audit(1728513768.082:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5491 comm="syz.4.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4be17dff9 code=0x7ffc0000 [ 71.709052][ T29] audit: type=1326 audit(1728513768.082:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5491 comm="syz.4.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4be17dff9 code=0x7ffc0000 [ 71.709077][ T29] audit: type=1326 audit(1728513768.082:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5491 comm="syz.4.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4be17dff9 code=0x7ffc0000 [ 71.740472][ T5474] ext4 filesystem being mounted at /81/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 71.745030][ T29] audit: type=1326 audit(1728513768.082:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5491 comm="syz.4.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4be17dff9 code=0x7ffc0000 [ 71.930117][ T5506] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 71.938461][ T5508] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 71.962140][ T5503] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 72.016987][ T5512] netlink: 256 bytes leftover after parsing attributes in process `syz.1.634'. [ 72.045123][ T5301] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.244865][ T5301] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.253207][ T5523] FAULT_INJECTION: forcing a failure. [ 72.253207][ T5523] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 72.266436][ T5523] CPU: 1 UID: 0 PID: 5523 Comm: syz.0.635 Tainted: G W 6.12.0-rc2-syzkaller-00058-g75b607fab38d #0 [ 72.278646][ T5523] Tainted: [W]=WARN [ 72.282470][ T5523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 72.292696][ T5523] Call Trace: [ 72.296011][ T5523] [ 72.298961][ T5523] dump_stack_lvl+0xf2/0x150 [ 72.303811][ T5523] dump_stack+0x15/0x20 [ 72.307980][ T5523] should_fail_ex+0x223/0x230 [ 72.312693][ T5523] should_fail+0xb/0x10 [ 72.316906][ T5523] should_fail_usercopy+0x1a/0x20 [ 72.321980][ T5523] _copy_from_user+0x1e/0xd0 [ 72.326594][ T5523] copy_msghdr_from_user+0x54/0x2a0 [ 72.331825][ T5523] do_recvmmsg+0x282/0x740 [ 72.336338][ T5523] __x64_sys_recvmmsg+0xf9/0x170 [ 72.341338][ T5523] x64_sys_call+0x26e3/0x2d60 [ 72.346125][ T5523] do_syscall_64+0xc9/0x1c0 [ 72.350670][ T5523] ? clear_bhb_loop+0x55/0xb0 [ 72.355381][ T5523] ? clear_bhb_loop+0x55/0xb0 [ 72.360085][ T5523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.366101][ T5523] RIP: 0033:0x7fb9d70fdff9 [ 72.370520][ T5523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.390164][ T5523] RSP: 002b:00007fb9d5d56038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 72.398603][ T5523] RAX: ffffffffffffffda RBX: 00007fb9d72b6058 RCX: 00007fb9d70fdff9 [ 72.406671][ T5523] RDX: 04000000000003b4 RSI: 00000000200037c0 RDI: 0000000000000003 [ 72.414684][ T5523] RBP: 00007fb9d5d56090 R08: 0000000020003700 R09: 0000000000000000 [ 72.422687][ T5523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.430676][ T5523] R13: 0000000000000001 R14: 00007fb9d72b6058 R15: 00007ffe19f9c7f8 [ 72.438710][ T5523] [ 72.451759][ T5512] xt_TPROXY: Can be used only with -p tcp or -p udp [ 72.471291][ T5301] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.511636][ T5301] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.532567][ T3760] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.546502][ T164] EXT4-fs error (device loop2): ext4_release_dquot:6902: comm kworker/u8:5: Failed to release dquot type 1 [ 72.592202][ T5524] netem: incorrect ge model size [ 72.597227][ T5524] netem: change failed [ 72.660134][ T5301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.674133][ T5301] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.684116][ T164] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.691260][ T164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.695481][ T5544] loop2: detected capacity change from 0 to 2048 [ 72.716918][ T5301] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.727446][ T5301] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.750731][ T5544] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.758421][ T164] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.769908][ T164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.795125][ T5544] xt_CT: You must specify a L4 protocol and not use inversions on it [ 72.795841][ T5544] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 72.844829][ T5544] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 72.857066][ T5544] EXT4-fs (loop2): This should not happen!! Data will be lost [ 72.857066][ T5544] [ 72.866798][ T5544] EXT4-fs (loop2): Total free blocks count 0 [ 72.872917][ T5544] EXT4-fs (loop2): Free/Dirty block details [ 72.878917][ T5544] EXT4-fs (loop2): free_blocks=2415919104 [ 72.884706][ T5544] EXT4-fs (loop2): dirty_blocks=16 [ 72.889868][ T5544] EXT4-fs (loop2): Block reservation details [ 72.895869][ T5544] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 72.924099][ T5301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.938579][ T5572] FAULT_INJECTION: forcing a failure. [ 72.938579][ T5572] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 72.951662][ T5572] CPU: 1 UID: 0 PID: 5572 Comm: syz.0.644 Tainted: G W 6.12.0-rc2-syzkaller-00058-g75b607fab38d #0 [ 72.963732][ T5572] Tainted: [W]=WARN [ 72.967528][ T5572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 72.977589][ T5572] Call Trace: [ 72.980932][ T5572] [ 72.983920][ T5572] dump_stack_lvl+0xf2/0x150 [ 72.988577][ T5572] dump_stack+0x15/0x20 [ 72.992734][ T5572] should_fail_ex+0x223/0x230 [ 72.997438][ T5572] should_fail+0xb/0x10 [ 73.001711][ T5572] should_fail_usercopy+0x1a/0x20 [ 73.006815][ T5572] strncpy_from_user+0x25/0x200 [ 73.011673][ T5572] ? audit_log_end+0x1d0/0x1e0 [ 73.016444][ T5572] strncpy_from_user_nofault+0x66/0xe0 [ 73.021931][ T5572] bpf_probe_read_user_str+0x2a/0x70 [ 73.027219][ T5572] bpf_prog_bc7c5c6b9645592f+0x3e/0x40 [ 73.032746][ T5572] bpf_trace_run4+0x114/0x1e0 [ 73.037505][ T5572] ? update_load_avg+0x1f7/0x7c0 [ 73.042464][ T5572] __traceiter_sched_switch+0x3b/0x60 [ 73.047868][ T5572] __schedule+0x850/0x940 [ 73.052264][ T5572] schedule+0x55/0xc0 [ 73.056383][ T5572] syscall_exit_to_user_mode+0x9f/0x130 [ 73.061950][ T5572] do_syscall_64+0xd6/0x1c0 [ 73.066461][ T5572] ? clear_bhb_loop+0x55/0xb0 [ 73.071222][ T5572] ? clear_bhb_loop+0x55/0xb0 [ 73.075906][ T5572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.081864][ T5572] RIP: 0033:0x7fb9d70fcc8a [ 73.086284][ T5572] Code: 48 3d 00 f0 ff ff 77 48 c3 0f 1f 80 00 00 00 00 48 83 ec 18 89 7c 24 0c e8 13 8c 02 00 8b 7c 24 0c 89 c2 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 36 89 d7 89 44 24 0c e8 73 8c 02 00 8b 44 24 [ 73.105945][ T5572] RSP: 002b:00007fb9d5d76ff0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 73.114447][ T5572] RAX: fffffffffffffff7 RBX: 00007fb9d72b5f80 RCX: 00007fb9d70fcc8a [ 73.122427][ T5572] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000ffffffff [ 73.130456][ T5572] RBP: 00007fb9d5d77090 R08: 0000000000000000 R09: 0000000000000000 [ 73.138424][ T5572] R10: ffffffffffffffff R11: 0000000000000293 R12: 0000000000000001 [ 73.146392][ T5572] R13: 0000000000000000 R14: 00007fb9d72b5f80 R15: 00007ffe19f9c7f8 [ 73.154478][ T5572] [ 73.160260][ T5573] loop4: detected capacity change from 0 to 512 [ 73.174492][ T5573] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 73.188943][ T3760] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.200038][ T5573] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.643: bg 0: block 248: padding at end of block bitmap is not set [ 73.216064][ T5573] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.643: Failed to acquire dquot type 1 [ 73.228199][ T5573] EXT4-fs (loop4): 1 truncate cleaned up [ 73.237091][ T5301] veth0_vlan: entered promiscuous mode [ 73.246183][ T5301] veth1_vlan: entered promiscuous mode [ 73.253306][ T5573] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.266487][ T5573] ext4 filesystem being mounted at /142/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 73.283371][ T5301] veth0_macvtap: entered promiscuous mode [ 73.291017][ T5301] veth1_macvtap: entered promiscuous mode [ 73.303694][ T5301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.314222][ T5301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.324205][ T5301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.334652][ T5301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.344503][ T5301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.354954][ T5301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.364858][ T5301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.375349][ T5301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.388453][ T5301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.397615][ T5301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.408173][ T5301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.418107][ T5301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.428698][ T5301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.438559][ T5301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.449001][ T5301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.458869][ T5301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.469326][ T5301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.481412][ T5301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.494547][ T5301] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.503508][ T5301] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.512403][ T5301] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.521153][ T5301] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.582102][ T5588] hub 9-0:1.0: USB hub found [ 73.586867][ T5588] hub 9-0:1.0: 8 ports detected [ 73.602416][ T5586] loop7: detected capacity change from 0 to 7 [ 73.674741][ T5586] Buffer I/O error on dev loop7, logical block 0, async page read [ 73.732097][ T5586] Buffer I/O error on dev loop7, logical block 0, async page read [ 73.740040][ T5586] loop7: unable to read partition table [ 73.818918][ T5586] loop_reread_partitions: partition scan of loop7 (被xڬdƤݡ [ 73.818918][ T5586] ) failed (rc=-5) [ 73.842131][ T5597] loop3: detected capacity change from 0 to 512 [ 73.849694][ T5597] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 73.996911][ T3270] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.007289][ T36] EXT4-fs error (device loop4): ext4_release_dquot:6902: comm kworker/u8:2: Failed to release dquot type 1 [ 74.021118][ T5597] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.648: bg 0: block 248: padding at end of block bitmap is not set [ 74.037269][ T5597] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.648: Failed to acquire dquot type 1 [ 74.049629][ T5597] EXT4-fs (loop3): 1 truncate cleaned up [ 74.140642][ T5597] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.173668][ T5597] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 74.903352][ T5620] loop4: detected capacity change from 0 to 512 [ 74.978440][ T5620] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 74.996827][ T5620] EXT4-fs (loop4): 1 truncate cleaned up [ 75.008010][ T5620] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.058712][ T5301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.070668][ T1918] EXT4-fs error (device loop3): ext4_release_dquot:6902: comm kworker/u8:6: Failed to release dquot type 1 [ 75.084470][ T5632] netem: incorrect ge model size [ 75.089519][ T5632] netem: change failed [ 75.144479][ T5636] loop0: detected capacity change from 0 to 2048 [ 75.164112][ T5636] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 75.175783][ T5640] loop3: detected capacity change from 0 to 2048 [ 75.192993][ T5640] EXT4-fs (loop3): unsupported inode size: 32768 [ 75.199555][ T5640] EXT4-fs (loop3): blocksize: 2048 [ 75.210124][ T5636] netlink: 20 bytes leftover after parsing attributes in process `syz.0.663'. [ 75.221126][ T5636] EXT4-fs error (device loop0): ext4_search_dir:1505: inode #12: block 9: comm syz.0.663: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=13, rec_len=21, size=56 fake=0 [ 75.242274][ T5636] netlink: 72 bytes leftover after parsing attributes in process `syz.0.663'. [ 75.279030][ T3662] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.370408][ T3270] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.426811][ T5658] loop4: detected capacity change from 0 to 512 [ 75.443733][ T5656] loop0: detected capacity change from 0 to 2048 [ 75.455555][ T5658] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 75.505363][ T5658] EXT4-fs error (device loop4): ext4_orphan_get:1388: inode #15: comm syz.4.669: iget: bad i_size value: -67835469387268086 [ 75.523999][ T5656] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.542586][ T5658] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.669: couldn't read orphan inode 15 (err -117) [ 75.555127][ T5658] EXT4-fs (loop4): mounted filesystem f7ff0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.567489][ T5658] ext2 filesystem being mounted at /145/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.584267][ T5658] syz.4.669[5658] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 75.584387][ T5658] syz.4.669[5658] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 75.598845][ T5658] syz.4.669[5658] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 75.614530][ T5667] xt_CT: You must specify a L4 protocol and not use inversions on it [ 75.638431][ T5671] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 75.644122][ T5656] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 75.669020][ T5656] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 75.680981][ T3270] EXT4-fs (loop4): unmounting filesystem f7ff0000-0000-0000-0000-000000000000. [ 75.681324][ T5656] EXT4-fs (loop0): This should not happen!! Data will be lost [ 75.681324][ T5656] [ 75.699961][ T5656] EXT4-fs (loop0): Total free blocks count 0 [ 75.706045][ T5656] EXT4-fs (loop0): Free/Dirty block details [ 75.712017][ T5656] EXT4-fs (loop0): free_blocks=2415919104 [ 75.717759][ T5656] EXT4-fs (loop0): dirty_blocks=16 [ 75.722981][ T5656] EXT4-fs (loop0): Block reservation details [ 75.729017][ T5656] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 75.775031][ T5678] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 75.781605][ T5678] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 75.789298][ T5678] vhci_hcd vhci_hcd.0: Device attached [ 75.797162][ T3662] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.820209][ T5679] usbip_core: unknown command [ 75.824950][ T5679] vhci_hcd: unknown pdu 0 [ 75.829430][ T5679] usbip_core: unknown command [ 75.841642][ T5673] loop2: detected capacity change from 0 to 512 [ 75.851542][ T5671] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 75.859578][ T164] vhci_hcd: stop threads [ 75.859589][ T164] vhci_hcd: release socket [ 75.859598][ T164] vhci_hcd: disconnect device [ 75.872761][ T5673] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 75.873160][ T5673] EXT4-fs (loop2): 1 truncate cleaned up [ 75.873596][ T5673] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.968732][ T5695] loop7: detected capacity change from 0 to 7 [ 75.976959][ T5695] Buffer I/O error on dev loop7, logical block 0, async page read [ 75.987877][ T5695] Buffer I/O error on dev loop7, logical block 0, async page read [ 75.995773][ T5695] loop7: unable to read partition table [ 76.002866][ T5695] loop_reread_partitions: partition scan of loop7 (被xڬdƤݡ [ 76.002866][ T5695] ) failed (rc=-5) [ 76.080445][ T3760] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.494437][ T5716] loop3: detected capacity change from 0 to 512 [ 76.519110][ T5716] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 76.534501][ T5717] xt_hashlimit: max too large, truncated to 1048576 [ 76.571034][ T5726] loop2: detected capacity change from 0 to 2048 [ 76.587566][ T5716] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.689: bg 0: block 248: padding at end of block bitmap is not set [ 76.603155][ T5716] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.689: Failed to acquire dquot type 1 [ 76.614922][ T5716] EXT4-fs (loop3): 1 truncate cleaned up [ 76.621204][ T5716] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.635336][ T5716] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 76.716828][ T5726] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.730473][ T29] kauditd_printk_skb: 205 callbacks suppressed [ 76.730486][ T29] audit: type=1326 audit(1728513773.142:1541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5727 comm="syz.0.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9d70fdff9 code=0x7ffc0000 [ 76.760177][ T29] audit: type=1326 audit(1728513773.142:1542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5727 comm="syz.0.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9d70fdff9 code=0x7ffc0000 [ 76.783544][ T29] audit: type=1326 audit(1728513773.142:1543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5727 comm="syz.0.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7fb9d70fdff9 code=0x7ffc0000 [ 76.806866][ T29] audit: type=1326 audit(1728513773.142:1544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5727 comm="syz.0.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9d70fdff9 code=0x7ffc0000 [ 76.830266][ T29] audit: type=1326 audit(1728513773.142:1545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5727 comm="syz.0.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb9d70fdff9 code=0x7ffc0000 [ 76.830350][ T5735] xt_CT: You must specify a L4 protocol and not use inversions on it [ 76.853577][ T29] audit: type=1326 audit(1728513773.142:1546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5727 comm="syz.0.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9d70fdff9 code=0x7ffc0000 [ 76.853609][ T29] audit: type=1326 audit(1728513773.142:1547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5727 comm="syz.0.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb9d70fdff9 code=0x7ffc0000 [ 76.853641][ T29] audit: type=1326 audit(1728513773.142:1548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5727 comm="syz.0.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9d70fdff9 code=0x7ffc0000 [ 76.888983][ T5735] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, [ 76.908419][ T29] audit: type=1326 audit(1728513773.142:1549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5727 comm="syz.0.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb9d70fdff9 code=0x7ffc0000 [ 76.931694][ T5735] block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 76.989519][ T29] audit: type=1326 audit(1728513773.292:1550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5727 comm="syz.0.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9d70fdff9 code=0x7ffc0000 [ 77.982756][ T5740] hub 9-0:1.0: USB hub found [ 77.983442][ T3760] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.987513][ T5740] hub 9-0:1.0: 8 ports detected [ 78.337044][ T5759] netlink: 256 bytes leftover after parsing attributes in process `syz.4.705'. [ 78.355314][ T5301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.374551][ T36] EXT4-fs error (device loop3): ext4_release_dquot:6902: comm kworker/u8:2: Failed to release dquot type 1 [ 78.389395][ T5768] netlink: 256 bytes leftover after parsing attributes in process `syz.2.706'. [ 78.403800][ T5759] loop4: detected capacity change from 0 to 1024 [ 78.411189][ T5759] EXT4-fs: Ignoring removed oldalloc option [ 78.417210][ T5759] ext4: Unknown parameter 'smackfsdef' [ 78.442160][ T5768] loop2: detected capacity change from 0 to 1024 [ 78.459013][ T5768] EXT4-fs: Ignoring removed oldalloc option [ 78.465191][ T5768] ext4: Unknown parameter 'smackfsdef' [ 78.482143][ T5780] netlink: 'syz.0.704': attribute type 3 has an invalid length. [ 78.490789][ T5768] xt_TPROXY: Can be used only with -p tcp or -p udp [ 78.521101][ T5759] xt_TPROXY: Can be used only with -p tcp or -p udp [ 78.552082][ T5786] loop3: detected capacity change from 0 to 512 [ 78.561439][ T5786] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 78.585940][ T5780] program syz.0.704 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 78.607274][ T5786] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.708: bg 0: block 248: padding at end of block bitmap is not set [ 78.627806][ T5786] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.708: Failed to acquire dquot type 1 [ 78.641247][ T5786] EXT4-fs (loop3): 1 truncate cleaned up [ 78.650604][ T5786] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.663790][ T5786] ext4 filesystem being mounted at /13/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 78.804168][ T5815] netlink: 256 bytes leftover after parsing attributes in process `syz.4.719'. [ 78.920499][ T5815] loop4: detected capacity change from 0 to 1024 [ 79.635799][ T5815] EXT4-fs: Ignoring removed oldalloc option [ 79.648896][ T5815] ext4: Unknown parameter 'smackfsdef' [ 79.686310][ T5824] loop0: detected capacity change from 0 to 512 [ 79.719093][ T5824] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 79.741076][ T5815] xt_TPROXY: Can be used only with -p tcp or -p udp [ 79.741554][ T5301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.786381][ T5824] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.721: bg 0: block 248: padding at end of block bitmap is not set [ 79.806818][ T5824] EXT4-fs error (device loop0): ext4_acquire_dquot:6879: comm syz.0.721: Failed to acquire dquot type 1 [ 79.834118][ T5824] EXT4-fs (loop0): 1 truncate cleaned up [ 79.847144][ T5824] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.859914][ T5824] ext4 filesystem being mounted at /127/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 80.130452][ T5855] loop7: detected capacity change from 0 to 7 [ 80.137005][ T5855] Buffer I/O error on dev loop7, logical block 0, async page read [ 80.182005][ T5855] Buffer I/O error on dev loop7, logical block 0, async page read [ 80.190005][ T5855] loop7: unable to read partition table [ 80.243910][ T5855] loop_reread_partitions: partition scan of loop7 (被xڬdƤݡ [ 80.243910][ T5855] ) failed (rc=-5) [ 80.392081][ T5858] netlink: 256 bytes leftover after parsing attributes in process `syz.1.733'. [ 80.434272][ T5865] netlink: 20 bytes leftover after parsing attributes in process `syz.3.736'. [ 80.448753][ T5866] tipc: Started in network mode [ 80.453715][ T5866] tipc: Node identity -name-of, cluster identity 4711 [ 80.460585][ T5866] tipc: Enabling of bearer rejected, failed to enable media [ 80.461618][ T5858] xt_TPROXY: Can be used only with -p tcp or -p udp [ 80.556124][ C1] hrtimer: interrupt took 46792 ns [ 80.564165][ T3662] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.575014][ T3387] EXT4-fs error (device loop0): ext4_release_dquot:6902: comm kworker/u8:7: Failed to release dquot type 1 [ 80.575793][ T5876] vxcan0: tx drop: invalid sa for name 0x0000000000000001 [ 80.627731][ T5879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.640254][ T5879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.745599][ T5888] FAULT_INJECTION: forcing a failure. [ 80.745599][ T5888] name failslab, interval 1, probability 0, space 0, times 0 [ 80.758320][ T5888] CPU: 0 UID: 0 PID: 5888 Comm: syz.0.746 Tainted: G W 6.12.0-rc2-syzkaller-00058-g75b607fab38d #0 [ 80.770424][ T5888] Tainted: [W]=WARN [ 80.774239][ T5888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 80.784305][ T5888] Call Trace: [ 80.787666][ T5888] [ 80.790599][ T5888] dump_stack_lvl+0xf2/0x150 [ 80.795270][ T5888] dump_stack+0x15/0x20 [ 80.799459][ T5888] should_fail_ex+0x223/0x230 [ 80.804235][ T5888] ? __alloc_skb+0x10b/0x310 [ 80.808842][ T5888] should_failslab+0x8f/0xb0 [ 80.813447][ T5888] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 80.819340][ T5888] __alloc_skb+0x10b/0x310 [ 80.823776][ T5888] audit_log_start+0x368/0x6b0 [ 80.828557][ T5888] audit_seccomp+0x4b/0x130 [ 80.833135][ T5888] __seccomp_filter+0x6fa/0x1180 [ 80.838108][ T5888] ? proc_fail_nth_write+0x12a/0x150 [ 80.843483][ T5888] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 80.849240][ T5888] ? vfs_write+0x580/0x910 [ 80.853699][ T5888] ? __fget_files+0x1d4/0x210 [ 80.858407][ T5888] __secure_computing+0x9f/0x1c0 [ 80.863394][ T5888] syscall_trace_enter+0xd1/0x1f0 [ 80.868438][ T5888] ? fpregs_assert_state_consistent+0x83/0xa0 [ 80.874550][ T5888] do_syscall_64+0xaa/0x1c0 [ 80.879059][ T5888] ? clear_bhb_loop+0x55/0xb0 [ 80.883754][ T5888] ? clear_bhb_loop+0x55/0xb0 [ 80.888479][ T5888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.894480][ T5888] RIP: 0033:0x7fb9d70fdff9 [ 80.898903][ T5888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.918671][ T5888] RSP: 002b:00007fb9d5d77038 EFLAGS: 00000246 ORIG_RAX: 000000000000007a [ 80.927189][ T5888] RAX: ffffffffffffffda RBX: 00007fb9d72b5f80 RCX: 00007fb9d70fdff9 [ 80.935181][ T5888] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 80.943166][ T5888] RBP: 00007fb9d5d77090 R08: 0000000000000000 R09: 0000000000000000 [ 80.951187][ T5888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.959230][ T5888] R13: 0000000000000000 R14: 00007fb9d72b5f80 R15: 00007ffe19f9c7f8 [ 80.967223][ T5888] [ 80.991966][ T5891] FAULT_INJECTION: forcing a failure. [ 80.991966][ T5891] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 81.005163][ T5891] CPU: 1 UID: 0 PID: 5891 Comm: syz.2.749 Tainted: G W 6.12.0-rc2-syzkaller-00058-g75b607fab38d #0 [ 81.017302][ T5891] Tainted: [W]=WARN [ 81.021124][ T5891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 81.031273][ T5891] Call Trace: [ 81.034570][ T5891] [ 81.037506][ T5891] dump_stack_lvl+0xf2/0x150 [ 81.042156][ T5891] dump_stack+0x15/0x20 [ 81.046375][ T5891] should_fail_ex+0x223/0x230 [ 81.051074][ T5891] should_fail+0xb/0x10 [ 81.055314][ T5891] should_fail_usercopy+0x1a/0x20 [ 81.060371][ T5891] _copy_to_user+0x1e/0xa0 [ 81.064820][ T5891] simple_read_from_buffer+0xa0/0x110 [ 81.070288][ T5891] proc_fail_nth_read+0xf9/0x140 [ 81.075250][ T5891] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 81.080909][ T5891] vfs_read+0x195/0x720 [ 81.085158][ T5891] ? __rcu_read_unlock+0x4e/0x70 [ 81.090152][ T5891] ? __fget_files+0x1d4/0x210 [ 81.094871][ T5891] ksys_read+0xeb/0x1b0 [ 81.099075][ T5891] __x64_sys_read+0x42/0x50 [ 81.103614][ T5891] x64_sys_call+0x27d3/0x2d60 [ 81.108309][ T5891] do_syscall_64+0xc9/0x1c0 [ 81.112941][ T5891] ? clear_bhb_loop+0x55/0xb0 [ 81.117654][ T5891] ? clear_bhb_loop+0x55/0xb0 [ 81.122458][ T5891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.128378][ T5891] RIP: 0033:0x7ff37675ca3c [ 81.132806][ T5891] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 81.152524][ T5891] RSP: 002b:00007ff3753d7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 81.161018][ T5891] RAX: ffffffffffffffda RBX: 00007ff376915f80 RCX: 00007ff37675ca3c [ 81.169120][ T5891] RDX: 000000000000000f RSI: 00007ff3753d70a0 RDI: 0000000000000006 [ 81.177095][ T5891] RBP: 00007ff3753d7090 R08: 0000000000000000 R09: 0000000000000000 [ 81.185124][ T5891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.193110][ T5891] R13: 0000000000000000 R14: 00007ff376915f80 R15: 00007fff4ef88c68 [ 81.201106][ T5891] [ 81.238476][ T5900] random: crng reseeded on system resumption [ 81.335662][ T5904] FAULT_INJECTION: forcing a failure. [ 81.335662][ T5904] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 81.348909][ T5904] CPU: 0 UID: 0 PID: 5904 Comm: syz.1.753 Tainted: G W 6.12.0-rc2-syzkaller-00058-g75b607fab38d #0 [ 81.361008][ T5904] Tainted: [W]=WARN [ 81.364812][ T5904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 81.374877][ T5904] Call Trace: [ 81.378159][ T5904] [ 81.381110][ T5904] dump_stack_lvl+0xf2/0x150 [ 81.385715][ T5904] dump_stack+0x15/0x20 [ 81.389930][ T5904] should_fail_ex+0x223/0x230 [ 81.394641][ T5904] should_fail+0xb/0x10 [ 81.398856][ T5904] should_fail_usercopy+0x1a/0x20 [ 81.403967][ T5904] strncpy_from_user+0x25/0x200 [ 81.408843][ T5904] ? __rcu_read_unlock+0x34/0x70 [ 81.413833][ T5904] strncpy_from_user_nofault+0x66/0xe0 [ 81.419957][ T5904] bpf_probe_read_user_str+0x2a/0x70 [ 81.425259][ T5904] bpf_prog_02a70dbeb5f742df+0x43/0x45 [ 81.430722][ T5904] bpf_trace_run2+0x104/0x1d0 [ 81.435502][ T5904] ? sidtab_sid2str_get+0x106/0x140 [ 81.440737][ T5904] ? selinux_release_secctx+0x15/0x20 [ 81.446123][ T5904] ? security_sid_to_context_core+0x2b8/0x2f0 [ 81.452281][ T5904] ? selinux_release_secctx+0x15/0x20 [ 81.457735][ T5904] kfree+0x247/0x2f0 [ 81.461647][ T5904] ? security_sid_to_context+0x27/0x30 [ 81.467142][ T5904] selinux_release_secctx+0x15/0x20 [ 81.472451][ T5904] security_release_secctx+0x38/0x50 [ 81.477762][ T5904] audit_log_task_context+0xfc/0x1b0 [ 81.483142][ T5904] audit_log_task+0xfb/0x180 [ 81.487743][ T5904] audit_seccomp+0x68/0x130 [ 81.492301][ T5904] __seccomp_filter+0x6fa/0x1180 [ 81.497254][ T5904] ? proc_fail_nth_write+0x12a/0x150 [ 81.502603][ T5904] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 81.508251][ T5904] ? vfs_write+0x580/0x910 [ 81.512755][ T5904] ? __fget_files+0x1d4/0x210 [ 81.517522][ T5904] __secure_computing+0x9f/0x1c0 [ 81.522501][ T5904] syscall_trace_enter+0xd1/0x1f0 [ 81.527598][ T5904] ? fpregs_assert_state_consistent+0x83/0xa0 [ 81.533764][ T5904] do_syscall_64+0xaa/0x1c0 [ 81.538308][ T5904] ? clear_bhb_loop+0x55/0xb0 [ 81.543006][ T5904] ? clear_bhb_loop+0x55/0xb0 [ 81.547770][ T5904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.553685][ T5904] RIP: 0033:0x7fc3875adff9 [ 81.558173][ T5904] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.577898][ T5904] RSP: 002b:00007fc386227038 EFLAGS: 00000246 ORIG_RAX: 000000000000004d [ 81.586418][ T5904] RAX: ffffffffffffffda RBX: 00007fc387765f80 RCX: 00007fc3875adff9 [ 81.594554][ T5904] RDX: 0000000000000000 RSI: 0000000000002ff8 RDI: 0000000000000007 [ 81.602570][ T5904] RBP: 00007fc386227090 R08: 0000000000000000 R09: 0000000000000000 [ 81.610676][ T5904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.618655][ T5904] R13: 0000000000000000 R14: 00007fc387765f80 R15: 00007ffd00b9bd98 [ 81.626689][ T5904] [ 81.633685][ T5911] loop2: detected capacity change from 0 to 128 [ 81.658360][ T5911] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 81.669553][ T5915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.673508][ T5911] ext4 filesystem being mounted at /106/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 81.714861][ T5916] loop0: detected capacity change from 0 to 512 [ 81.722959][ T5915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.731429][ T5916] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 81.754441][ T5916] EXT4-fs (loop0): 1 truncate cleaned up [ 81.773167][ T5916] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.798313][ T29] kauditd_printk_skb: 258 callbacks suppressed [ 81.798335][ T29] audit: type=1400 audit(1728513778.222:1801): avc: denied { read } for pid=5914 comm="syz.1.757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 81.857077][ T5924] tmpfs: Unknown parameter 'hu' [ 81.922300][ T3662] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.976661][ T29] audit: type=1400 audit(1728513778.392:1802): avc: denied { accept } for pid=5932 comm="syz.3.765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 82.024150][ T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.050421][ T29] audit: type=1326 audit(1728513778.482:1803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5933 comm="syz.0.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9d70fdff9 code=0x7ffc0000 [ 82.078437][ T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.093014][ T29] audit: type=1326 audit(1728513778.502:1804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5933 comm="syz.0.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fb9d70fdff9 code=0x7ffc0000 [ 82.116526][ T29] audit: type=1326 audit(1728513778.502:1805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5933 comm="syz.0.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9d70fdff9 code=0x7ffc0000 [ 82.116927][ T5948] FAULT_INJECTION: forcing a failure. [ 82.116927][ T5948] name failslab, interval 1, probability 0, space 0, times 0 [ 82.140073][ T29] audit: type=1326 audit(1728513778.502:1806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5933 comm="syz.0.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7fb9d70fdff9 code=0x7ffc0000 [ 82.152723][ T5948] CPU: 0 UID: 0 PID: 5948 Comm: syz.3.767 Tainted: G W 6.12.0-rc2-syzkaller-00058-g75b607fab38d #0 [ 82.176088][ T29] audit: type=1326 audit(1728513778.502:1807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5933 comm="syz.0.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9d70fdff9 code=0x7ffc0000 [ 82.188101][ T5948] Tainted: [W]=WARN [ 82.188112][ T5948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 82.188130][ T5948] Call Trace: [ 82.188139][ T5948] [ 82.188149][ T5948] dump_stack_lvl+0xf2/0x150 [ 82.188183][ T5948] dump_stack+0x15/0x20 [ 82.211575][ T29] audit: type=1326 audit(1728513778.502:1808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5933 comm="syz.0.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7fb9d70fdff9 code=0x7ffc0000 [ 82.215336][ T5948] should_fail_ex+0x223/0x230 [ 82.225656][ T29] audit: type=1326 audit(1728513778.502:1809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5933 comm="syz.0.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9d70fdff9 code=0x7ffc0000 [ 82.228758][ T5948] ? __vmalloc_node_range_noprof+0x41f/0xec0 [ 82.297864][ T5948] should_failslab+0x8f/0xb0 [ 82.302567][ T5948] __kmalloc_node_noprof+0xa8/0x380 [ 82.307792][ T5948] __vmalloc_node_range_noprof+0x41f/0xec0 [ 82.313632][ T5948] ? selinux_capable+0x1f2/0x260 [ 82.318641][ T5948] ? bpf_prog_alloc_no_stats+0x49/0x360 [ 82.324242][ T5948] __vmalloc_noprof+0x5e/0x70 [ 82.328935][ T5948] ? bpf_prog_alloc_no_stats+0x49/0x360 [ 82.334606][ T5948] bpf_prog_alloc_no_stats+0x49/0x360 [ 82.340003][ T5948] ? bpf_prog_alloc+0x28/0x150 [ 82.344922][ T5948] bpf_prog_alloc+0x3a/0x150 [ 82.349535][ T5948] bpf_prog_load+0x4d1/0x1070 [ 82.354216][ T5948] ? __rcu_read_unlock+0x4e/0x70 [ 82.359316][ T5948] __sys_bpf+0x463/0x7a0 [ 82.363700][ T5948] __x64_sys_bpf+0x43/0x50 [ 82.368232][ T5948] x64_sys_call+0x2625/0x2d60 [ 82.373040][ T5948] do_syscall_64+0xc9/0x1c0 [ 82.377610][ T5948] ? clear_bhb_loop+0x55/0xb0 [ 82.382314][ T5948] ? clear_bhb_loop+0x55/0xb0 [ 82.387065][ T5948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.393015][ T5948] RIP: 0033:0x7f458123dff9 [ 82.397496][ T5948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.417219][ T5948] RSP: 002b:00007f457feb1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 82.425644][ T5948] RAX: ffffffffffffffda RBX: 00007f45813f5f80 RCX: 00007f458123dff9 [ 82.433624][ T5948] RDX: 0000000000000094 RSI: 0000000020000840 RDI: 0000000000000005 [ 82.441634][ T5948] RBP: 00007f457feb1090 R08: 0000000000000000 R09: 0000000000000000 [ 82.449614][ T5948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.457614][ T5948] R13: 0000000000000000 R14: 00007f45813f5f80 R15: 00007ffd971059c8 [ 82.465677][ T5948] [ 82.468846][ T5948] syz.3.767: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0 [ 82.486043][ T5948] CPU: 0 UID: 0 PID: 5948 Comm: syz.3.767 Tainted: G W 6.12.0-rc2-syzkaller-00058-g75b607fab38d #0 [ 82.498170][ T5948] Tainted: [W]=WARN [ 82.502040][ T5948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 82.512128][ T5948] Call Trace: [ 82.515445][ T5948] [ 82.518392][ T5948] dump_stack_lvl+0xf2/0x150 [ 82.523065][ T5948] dump_stack+0x15/0x20 [ 82.527231][ T5948] warn_alloc+0x145/0x1b0 [ 82.531591][ T5948] ? should_fail_ex+0x198/0x230 [ 82.536450][ T5948] ? __vmalloc_node_range_noprof+0x41f/0xec0 [ 82.542476][ T5948] __vmalloc_node_range_noprof+0x4b6/0xec0 [ 82.548337][ T5948] ? selinux_capable+0x1f2/0x260 [ 82.553368][ T5948] ? bpf_prog_alloc_no_stats+0x49/0x360 [ 82.558937][ T5948] __vmalloc_noprof+0x5e/0x70 [ 82.563627][ T5948] ? bpf_prog_alloc_no_stats+0x49/0x360 [ 82.569257][ T5948] bpf_prog_alloc_no_stats+0x49/0x360 [ 82.574860][ T5948] ? bpf_prog_alloc+0x28/0x150 [ 82.579720][ T5948] bpf_prog_alloc+0x3a/0x150 [ 82.584401][ T5948] bpf_prog_load+0x4d1/0x1070 [ 82.589077][ T5948] ? __rcu_read_unlock+0x4e/0x70 [ 82.594060][ T5948] __sys_bpf+0x463/0x7a0 [ 82.598337][ T5948] __x64_sys_bpf+0x43/0x50 [ 82.602868][ T5948] x64_sys_call+0x2625/0x2d60 [ 82.607616][ T5948] do_syscall_64+0xc9/0x1c0 [ 82.612181][ T5948] ? clear_bhb_loop+0x55/0xb0 [ 82.616892][ T5948] ? clear_bhb_loop+0x55/0xb0 [ 82.621583][ T5948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.627522][ T5948] RIP: 0033:0x7f458123dff9 [ 82.631934][ T5948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.651673][ T5948] RSP: 002b:00007f457feb1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 82.660098][ T5948] RAX: ffffffffffffffda RBX: 00007f45813f5f80 RCX: 00007f458123dff9 [ 82.668080][ T5948] RDX: 0000000000000094 RSI: 0000000020000840 RDI: 0000000000000005 [ 82.676125][ T5948] RBP: 00007f457feb1090 R08: 0000000000000000 R09: 0000000000000000 [ 82.684110][ T5948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.692177][ T5948] R13: 0000000000000000 R14: 00007f45813f5f80 R15: 00007ffd971059c8 [ 82.700158][ T5948] [ 82.703297][ T5948] Mem-Info: [ 82.706421][ T5948] active_anon:4086 inactive_anon:2 isolated_anon:0 [ 82.706421][ T5948] active_file:14053 inactive_file:1942 isolated_file:0 [ 82.706421][ T5948] unevictable:0 dirty:383 writeback:0 [ 82.706421][ T5948] slab_reclaimable:2620 slab_unreclaimable:15003 [ 82.706421][ T5948] mapped:21215 shmem:287 pagetables:725 [ 82.706421][ T5948] sec_pagetables:0 bounce:0 [ 82.706421][ T5948] kernel_misc_reclaimable:0 [ 82.706421][ T5948] free:1911164 free_pcp:6184 free_cma:0 [ 82.709220][ T3760] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 82.751265][ T5948] Node 0 active_anon:16344kB inactive_anon:8kB active_file:56212kB inactive_file:7768kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:84860kB dirty:1532kB writeback:0kB shmem:1148kB writeback_tmp:0kB kernel_stack:3312kB pagetables:2900kB sec_pagetables:0kB all_unreclaimable? no [ 82.788046][ T5948] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 82.815034][ T5948] lowmem_reserve[]: 0 2866 7844 0 [ 82.820152][ T5948] Node 0 DMA32 free:2950372kB boost:0kB min:4136kB low:7068kB high:10000kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953904kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:3532kB free_cma:0kB [ 82.848846][ T5948] lowmem_reserve[]: 0 0 4978 0 [ 82.850161][ T29] audit: type=1400 audit(1728513779.282:1810): avc: denied { shutdown } for pid=5951 comm="syz.1.770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 82.853813][ T5948] Node 0 Normal free:4679304kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:16228kB inactive_anon:8kB active_file:56212kB inactive_file:7768kB unevictable:0kB writepending:1532kB present:5242880kB managed:5098208kB mlocked:0kB bounce:0kB free_pcp:20976kB local_pcp:20184kB free_cma:0kB [ 82.903717][ T5948] lowmem_reserve[]: 0 0 0 0 [ 82.908298][ T5948] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 82.921251][ T5948] Node 0 DMA32: 3*4kB (M) 1*8kB (M) 3*16kB (M) 5*32kB (M) 2*64kB (M) 3*128kB (M) 2*256kB (M) 2*512kB (M) 3*1024kB (M) 2*2048kB (M) 718*4096kB (M) = 2950372kB [ 82.937636][ T5948] Node 0 Normal: 490*4kB (UME) 560*8kB (UME) 318*16kB (UME) 297*32kB (UME) 240*64kB (UME) 56*128kB (UM) 46*256kB (UME) 27*512kB (UME) 28*1024kB (UM) 5*2048kB (UM) 1116*4096kB (UM) = 4679208kB [ 82.956847][ T5948] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 82.966191][ T5948] 16284 total pagecache pages [ 82.970892][ T5948] 2 pages in swap cache [ 82.975050][ T5948] Free swap = 124476kB [ 82.979252][ T5948] Total swap = 124996kB [ 82.983422][ T5948] 2097051 pages RAM [ 82.987297][ T5948] 0 pages HighMem/MovableOnly [ 82.992052][ T5948] 80183 pages reserved [ 83.000955][ T5959] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 83.007528][ T5959] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 83.015792][ T5959] vhci_hcd vhci_hcd.0: Device attached [ 83.018428][ T5963] FAULT_INJECTION: forcing a failure. [ 83.018428][ T5963] name failslab, interval 1, probability 0, space 0, times 0 [ 83.023384][ T5960] usbip_core: unknown command [ 83.034317][ T5963] CPU: 0 UID: 0 PID: 5963 Comm: syz.0.773 Tainted: G W 6.12.0-rc2-syzkaller-00058-g75b607fab38d #0 [ 83.039035][ T5960] vhci_hcd: unknown pdu 0 [ 83.039047][ T5960] usbip_core: unknown command [ 83.051084][ T5963] Tainted: [W]=WARN [ 83.051095][ T5963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 83.051111][ T5963] Call Trace: [ 83.051119][ T5963] [ 83.051128][ T5963] dump_stack_lvl+0xf2/0x150 [ 83.051157][ T5963] dump_stack+0x15/0x20 [ 83.051209][ T5963] should_fail_ex+0x223/0x230 [ 83.051247][ T5963] ? __alloc_skb+0x10b/0x310 [ 83.051282][ T5963] should_failslab+0x8f/0xb0 [ 83.051310][ T5963] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 83.051466][ T5963] __alloc_skb+0x10b/0x310 [ 83.051504][ T5963] audit_log_start+0x368/0x6b0 [ 83.051538][ T5963] audit_seccomp+0x4b/0x130 [ 83.051585][ T5963] __seccomp_filter+0x6fa/0x1180 [ 83.127969][ T5963] ? proc_fail_nth_write+0x12a/0x150 [ 83.133329][ T5963] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 83.138992][ T5963] ? vfs_write+0x580/0x910 [ 83.143430][ T5963] ? __fget_files+0x1d4/0x210 [ 83.148242][ T5963] __secure_computing+0x9f/0x1c0 [ 83.153197][ T5963] syscall_trace_enter+0xd1/0x1f0 [ 83.158239][ T5963] ? fpregs_assert_state_consistent+0x83/0xa0 [ 83.164331][ T5963] do_syscall_64+0xaa/0x1c0 [ 83.168852][ T5963] ? clear_bhb_loop+0x55/0xb0 [ 83.173549][ T5963] ? clear_bhb_loop+0x55/0xb0 [ 83.178255][ T5963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.184222][ T5963] RIP: 0033:0x7fb9d70fdff9 [ 83.188699][ T5963] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.208320][ T5963] RSP: 002b:00007fb9d5d77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000126 [ 83.216764][ T5963] RAX: ffffffffffffffda RBX: 00007fb9d72b5f80 RCX: 00007fb9d70fdff9 [ 83.225164][ T5963] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 83.233236][ T5963] RBP: 00007fb9d5d77090 R08: 0000000000000000 R09: 0000000000000000 [ 83.241368][ T5963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.249347][ T5963] R13: 0000000000000000 R14: 00007fb9d72b5f80 R15: 00007ffe19f9c7f8 [ 83.257397][ T5963] [ 83.269902][ T164] vhci_hcd: stop threads [ 83.274202][ T164] vhci_hcd: release socket [ 83.278619][ T164] vhci_hcd: disconnect device [ 83.286209][ T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.307218][ T5930] chnl_net:caif_netlink_parms(): no params data found [ 83.354785][ T5973] loop2: detected capacity change from 0 to 512 [ 83.355124][ T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.382736][ T5973] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 83.398856][ T5973] EXT4-fs (loop2): 1 truncate cleaned up [ 83.408206][ T5973] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.440863][ T5930] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.447969][ T5930] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.455298][ T5930] bridge_slave_0: entered allmulticast mode [ 83.461809][ T5930] bridge_slave_0: entered promiscuous mode [ 83.468786][ T5930] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.475999][ T5930] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.483306][ T5930] bridge_slave_1: entered allmulticast mode [ 83.491505][ T5930] bridge_slave_1: entered promiscuous mode [ 83.520439][ T36] bridge_slave_1: left allmulticast mode [ 83.526132][ T36] bridge_slave_1: left promiscuous mode [ 83.531853][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.539690][ T36] bridge_slave_0: left allmulticast mode [ 83.545359][ T36] bridge_slave_0: left promiscuous mode [ 83.551061][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.573648][ T3760] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.659799][ T5984] loop0: detected capacity change from 0 to 512 [ 83.671840][ T5984] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.684535][ T5984] ext4 filesystem being mounted at /138/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 83.697942][ T5984] EXT4-fs (loop0): shut down requested (0) [ 83.704108][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 83.714709][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 83.725454][ T36] bond0 (unregistering): Released all slaves [ 83.743151][ T5930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.755588][ T5930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.776859][ T5930] team0: Port device team_slave_0 added [ 83.783879][ T5930] team0: Port device team_slave_1 added [ 83.791984][ T36] hsr_slave_0: left promiscuous mode [ 83.797791][ T36] hsr_slave_1: left promiscuous mode [ 83.804026][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.811543][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.820081][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.827494][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.842145][ T36] veth1_macvtap: left promiscuous mode [ 83.847688][ T36] veth0_macvtap: left promiscuous mode [ 83.853238][ T36] veth1_vlan: left promiscuous mode [ 83.858555][ T36] veth0_vlan: left promiscuous mode [ 83.890101][ T5996] loop7: detected capacity change from 0 to 7 [ 83.897441][ T5996] Buffer I/O error on dev loop7, logical block 0, async page read [ 83.907938][ T5996] Buffer I/O error on dev loop7, logical block 0, async page read [ 83.915910][ T5996] loop7: unable to read partition table [ 83.923929][ T5996] loop_reread_partitions: partition scan of loop7 (被xڬdƤݡ [ 83.923929][ T5996] ) failed (rc=-5) [ 84.004868][ T36] team0 (unregistering): Port device team_slave_1 removed [ 84.016203][ T36] team0 (unregistering): Port device C removed [ 84.072475][ T5930] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.079581][ T5930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.082053][ T6010] FAULT_INJECTION: forcing a failure. [ 84.082053][ T6010] name failslab, interval 1, probability 0, space 0, times 0 [ 84.105504][ T5930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.107873][ T5930] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.118258][ T6010] CPU: 1 UID: 0 PID: 6010 Comm: syz.1.782 Tainted: G W 6.12.0-rc2-syzkaller-00058-g75b607fab38d #0 [ 84.128757][ T5930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.135665][ T6010] Tainted: [W]=WARN [ 84.135674][ T6010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 84.147719][ T5930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.173547][ T6010] Call Trace: [ 84.173556][ T6010] [ 84.173566][ T6010] dump_stack_lvl+0xf2/0x150 [ 84.173595][ T6010] dump_stack+0x15/0x20 [ 84.213153][ T6010] should_fail_ex+0x223/0x230 [ 84.217872][ T6010] ? security_inode_alloc+0x32/0x100 [ 84.223249][ T6010] should_failslab+0x8f/0xb0 [ 84.227885][ T6010] kmem_cache_alloc_noprof+0x4c/0x290 [ 84.233367][ T6010] security_inode_alloc+0x32/0x100 [ 84.238516][ T6010] inode_init_always+0x439/0x480 [ 84.243495][ T6010] ? __pfx_sock_alloc_inode+0x10/0x10 [ 84.248968][ T6010] alloc_inode+0x7d/0x160 [ 84.253394][ T6010] new_inode_pseudo+0x15/0x20 [ 84.258094][ T6010] do_accept+0xdb/0x390 [ 84.262285][ T6010] ? vfs_write+0x580/0x910 [ 84.266795][ T6010] __sys_accept4+0xc4/0x150 [ 84.271387][ T6010] __x64_sys_accept+0x44/0x50 [ 84.276100][ T6010] x64_sys_call+0x294f/0x2d60 [ 84.280870][ T6010] do_syscall_64+0xc9/0x1c0 [ 84.285396][ T6010] ? clear_bhb_loop+0x55/0xb0 [ 84.290149][ T6010] ? clear_bhb_loop+0x55/0xb0 [ 84.294885][ T6010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.300875][ T6010] RIP: 0033:0x7fc3875adff9 [ 84.305399][ T6010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.325048][ T6010] RSP: 002b:00007fc386227038 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 84.333491][ T6010] RAX: ffffffffffffffda RBX: 00007fc387765f80 RCX: 00007fc3875adff9 [ 84.341504][ T6010] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 84.349484][ T6010] RBP: 00007fc386227090 R08: 0000000000000000 R09: 0000000000000000 [ 84.357551][ T6010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.365541][ T6010] R13: 0000000000000000 R14: 00007fc387765f80 R15: 00007ffd00b9bd98 [ 84.373526][ T6010] [ 84.420760][ T5930] hsr_slave_0: entered promiscuous mode [ 84.426963][ T6028] xt_hashlimit: max too large, truncated to 1048576 [ 84.433946][ T5930] hsr_slave_1: entered promiscuous mode [ 84.442720][ T3662] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.452095][ T5930] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.461078][ T5930] Cannot create hsr debugfs directory [ 84.471235][ T6025] syz.3.783 uses obsolete (PF_INET,SOCK_PACKET) [ 84.518659][ T6041] loop2: detected capacity change from 0 to 512 [ 84.537935][ T6041] EXT4-fs warning (device loop2): read_mmp_block:115: Error -117 while reading MMP block 0 [ 84.543485][ T6043] loop0: detected capacity change from 0 to 512 [ 84.562035][ T6043] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 84.588383][ T6043] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.789: bg 0: block 248: padding at end of block bitmap is not set [ 84.609173][ T6043] EXT4-fs error (device loop0): ext4_acquire_dquot:6879: comm syz.0.789: Failed to acquire dquot type 1 [ 84.648473][ T6056] netlink: 256 bytes leftover after parsing attributes in process `syz.3.793'. [ 84.659374][ T6043] EXT4-fs (loop0): 1 truncate cleaned up [ 84.665455][ T6043] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.713012][ T6056] loop3: detected capacity change from 0 to 1024 [ 84.725761][ T6043] ext4 filesystem being mounted at /140/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 84.751643][ T6056] EXT4-fs: Ignoring removed oldalloc option [ 84.768309][ T6056] ext4: Unknown parameter 'smackfsdef' [ 84.800358][ T6056] xt_TPROXY: Can be used only with -p tcp or -p udp [ 84.844386][ T6075] netlink: 256 bytes leftover after parsing attributes in process `syz.3.794'. [ 84.906155][ T6075] loop3: detected capacity change from 0 to 1024 [ 84.913140][ T6075] EXT4-fs: Ignoring removed oldalloc option [ 84.924217][ T6075] ext4: Unknown parameter 'smackfsdef' [ 84.995352][ T6085] hub 9-0:1.0: USB hub found [ 85.000125][ T6085] hub 9-0:1.0: 8 ports detected [ 85.060612][ T5930] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 85.073561][ T6087] xt_TPROXY: Can be used only with -p tcp or -p udp [ 85.117026][ T5930] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 85.181580][ T5930] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 85.247270][ T5930] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 85.341784][ T6096] xt_hashlimit: max too large, truncated to 1048576 [ 85.375897][ T5930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.423572][ T6102] loop3: detected capacity change from 0 to 136 [ 85.455837][ T3662] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.469645][ T11] EXT4-fs error (device loop0): ext4_release_dquot:6902: comm kworker/u8:0: Failed to release dquot type 1 [ 85.470152][ T6102] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 85.519063][ T5930] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.651853][ T3387] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.658991][ T3387] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.668888][ T3387] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.676047][ T3387] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.686144][ T6125] tipc: Started in network mode [ 85.691173][ T6125] tipc: Node identity ac14140f, cluster identity 4711 [ 85.698497][ T6125] tipc: New replicast peer: 255.255.255.255 [ 85.704657][ T6125] tipc: Enabled bearer , priority 10 [ 85.727521][ T5930] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 85.737988][ T5930] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.857635][ T5930] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.953102][ T6169] FAULT_INJECTION: forcing a failure. [ 85.953102][ T6169] name failslab, interval 1, probability 0, space 0, times 0 [ 85.965856][ T6169] CPU: 1 UID: 0 PID: 6169 Comm: syz.1.810 Tainted: G W 6.12.0-rc2-syzkaller-00058-g75b607fab38d #0 [ 85.977985][ T6169] Tainted: [W]=WARN [ 85.981856][ T6169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 85.991932][ T6169] Call Trace: [ 85.994952][ T5930] veth0_vlan: entered promiscuous mode [ 85.995206][ T6169] [ 86.003612][ T5930] veth1_vlan: entered promiscuous mode [ 86.003668][ T6169] dump_stack_lvl+0xf2/0x150 [ 86.013725][ T6169] dump_stack+0x15/0x20 [ 86.017484][ T5930] veth0_macvtap: entered promiscuous mode [ 86.017879][ T6169] should_fail_ex+0x223/0x230 [ 86.025626][ T5930] veth1_macvtap: entered promiscuous mode [ 86.028256][ T6169] ? security_file_alloc+0x32/0x100 [ 86.038710][ T5930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.039231][ T6169] should_failslab+0x8f/0xb0 [ 86.039275][ T6169] kmem_cache_alloc_noprof+0x4c/0x290 [ 86.049682][ T5930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.054242][ T6169] security_file_alloc+0x32/0x100 [ 86.059609][ T5930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.069385][ T6169] alloc_empty_file+0x121/0x2f0 [ 86.069419][ T6169] alloc_file_pseudo+0xc3/0x140 [ 86.069451][ T6169] sock_alloc_file+0x9b/0x1c0 [ 86.069533][ T6169] __sys_socket+0x112/0x240 [ 86.069566][ T6169] __x64_sys_socket+0x3f/0x50 [ 86.069649][ T6169] x64_sys_call+0x2c97/0x2d60 [ 86.074675][ T5930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.085061][ T6169] do_syscall_64+0xc9/0x1c0 [ 86.085088][ T6169] ? clear_bhb_loop+0x55/0xb0 [ 86.089993][ T5930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.094807][ T6169] ? clear_bhb_loop+0x55/0xb0 [ 86.099477][ T5930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.103955][ T6169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.108693][ T5930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.113345][ T6169] RIP: 0033:0x7fc3875aff17 [ 86.113367][ T6169] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.123185][ T5930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.127632][ T6169] RSP: 002b:00007fc386225fa8 EFLAGS: 00000286 [ 86.133197][ T5930] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.142703][ T6169] ORIG_RAX: 0000000000000029 [ 86.142720][ T6169] RAX: ffffffffffffffda RBX: 00007fc387765f80 RCX: 00007fc3875aff17 [ 86.142740][ T6169] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 86.148667][ T5930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.157195][ T6169] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 86.157216][ T6169] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000001 [ 86.157248][ T6169] R13: 0000000000000000 R14: 00007fc387765f80 R15: 00007ffd00b9bd98 [ 86.163147][ T5930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.173542][ T6169] [ 86.271901][ T6176] netlink: 256 bytes leftover after parsing attributes in process `syz.1.812'. [ 86.276527][ T5930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.309464][ T5930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.319437][ T5930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.329959][ T5930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.339854][ T5930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.350329][ T5930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.361258][ T5930] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.369860][ T5930] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.378611][ T5930] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.381570][ T6179] xt_TPROXY: Can be used only with -p tcp or -p udp [ 86.387491][ T5930] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.402876][ T5930] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.625981][ T6198] loop4: detected capacity change from 0 to 512 [ 86.655611][ T6198] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 86.672947][ T6213] netlink: 256 bytes leftover after parsing attributes in process `syz.2.824'. [ 86.679442][ T6198] EXT4-fs (loop4): 1 truncate cleaned up [ 86.704567][ T6198] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.733754][ T6213] loop2: detected capacity change from 0 to 1024 [ 86.741666][ T6213] EXT4-fs: Ignoring removed oldalloc option [ 86.747906][ T6213] ext4: Unknown parameter 'smackfsdef' [ 86.753467][ T3340] tipc: Node number set to 2886997007 [ 86.783106][ T6221] loop3: detected capacity change from 0 to 512 [ 86.796113][ T6221] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 86.805882][ T6213] xt_TPROXY: Can be used only with -p tcp or -p udp [ 86.870686][ T6221] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.827: bg 0: block 248: padding at end of block bitmap is not set [ 86.885642][ T6221] __quota_error: 71 callbacks suppressed [ 86.885655][ T6221] Quota error (device loop3): write_blk: dquota write failed [ 86.898800][ T6221] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 86.908801][ T6221] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.827: Failed to acquire dquot type 1 [ 86.922913][ T6221] EXT4-fs (loop3): 1 truncate cleaned up [ 86.929295][ T6221] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.932268][ T5930] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.942006][ T6221] ext4 filesystem being mounted at /40/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 86.985758][ T6236] loop2: detected capacity change from 0 to 512 [ 87.004648][ T6225] loop0: detected capacity change from 0 to 2048 [ 87.027362][ T6236] EXT4-fs warning (device loop2): read_mmp_block:115: Error -117 while reading MMP block 0 [ 87.051913][ T6238] loop4: detected capacity change from 0 to 512 [ 87.069964][ T6238] EXT4-fs warning (device loop4): read_mmp_block:115: Error -117 while reading MMP block 0 [ 87.082347][ T6225] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.125817][ T3662] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.149528][ T6243] loop0: detected capacity change from 0 to 512 [ 87.156677][ T6243] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 87.169964][ T6241] hub 9-0:1.0: USB hub found [ 87.173175][ T6243] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.834: bg 0: block 248: padding at end of block bitmap is not set [ 87.174617][ T6241] hub 9-0:1.0: 8 ports detected [ 87.191116][ T6243] Quota error (device loop0): write_blk: dquota write failed [ 87.201225][ T6243] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 87.211277][ T6243] EXT4-fs error (device loop0): ext4_acquire_dquot:6879: comm syz.0.834: Failed to acquire dquot type 1 [ 87.224957][ T6243] EXT4-fs (loop0): 1 truncate cleaned up [ 87.231306][ T6243] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.243995][ T6243] ext4 filesystem being mounted at /146/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 87.273908][ T6250] loop7: detected capacity change from 0 to 7 [ 87.281461][ T6250] Buffer I/O error on dev loop7, logical block 0, async page read [ 87.289653][ T6250] Buffer I/O error on dev loop7, logical block 0, async page read [ 87.297617][ T6250] loop7: unable to read partition table [ 87.304852][ T6250] loop_reread_partitions: partition scan of loop7 (被xڬdƤݡ [ 87.304852][ T6250] ) failed (rc=-5) [ 87.399970][ T29] audit: type=1326 audit(1728513783.832:1877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6256 comm="syz.4.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19323cdff9 code=0x7ffc0000 [ 87.423551][ T29] audit: type=1326 audit(1728513783.832:1878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6256 comm="syz.4.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19323cdff9 code=0x7ffc0000 [ 87.447717][ T29] audit: type=1326 audit(1728513783.832:1879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6256 comm="syz.4.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f19323cdff9 code=0x7ffc0000 [ 87.471201][ T29] audit: type=1326 audit(1728513783.832:1880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6256 comm="syz.4.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19323cdff9 code=0x7ffc0000 [ 87.494531][ T29] audit: type=1326 audit(1728513783.832:1881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6256 comm="syz.4.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f19323cdff9 code=0x7ffc0000 [ 87.605038][ T29] audit: type=1326 audit(1728513783.972:1882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6256 comm="syz.4.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19323cdff9 code=0x7ffc0000 [ 87.764874][ T5301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.788624][ T1918] EXT4-fs error (device loop3): ext4_release_dquot:6902: comm kworker/u8:6: Failed to release dquot type 1 [ 87.927634][ T6267] loop2: detected capacity change from 0 to 512 [ 87.963652][ T6267] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 87.964710][ T6277] FAULT_INJECTION: forcing a failure. [ 87.964710][ T6277] name failslab, interval 1, probability 0, space 0, times 0 [ 87.978541][ T6267] EXT4-fs (loop2): 1 truncate cleaned up [ 87.991282][ T6277] CPU: 0 UID: 0 PID: 6277 Comm: syz.3.840 Tainted: G W 6.12.0-rc2-syzkaller-00058-g75b607fab38d #0 [ 87.998273][ T6267] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.008711][ T6277] Tainted: [W]=WARN [ 88.008721][ T6277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 88.008736][ T6277] Call Trace: [ 88.008744][ T6277] [ 88.041007][ T6277] dump_stack_lvl+0xf2/0x150 [ 88.045631][ T6277] dump_stack+0x15/0x20 [ 88.049793][ T6277] should_fail_ex+0x223/0x230 [ 88.054584][ T6277] ? security_sb_alloc+0x47/0x110 [ 88.059669][ T6277] should_failslab+0x8f/0xb0 [ 88.064264][ T6277] __kmalloc_noprof+0xa5/0x370 [ 88.069045][ T6277] ? should_failslab+0x8f/0xb0 [ 88.073819][ T6277] security_sb_alloc+0x47/0x110 [ 88.078728][ T6277] alloc_super+0x108/0x5b0 [ 88.083179][ T6277] ? __pfx_set_anon_super_fc+0x10/0x10 [ 88.088698][ T6277] sget_fc+0x259/0x670 [ 88.092797][ T6277] ? __pfx_set_anon_super_fc+0x10/0x10 [ 88.098277][ T6277] ? __pfx_shmem_fill_super+0x10/0x10 [ 88.103688][ T6277] get_tree_nodev+0x28/0xf0 [ 88.108227][ T6277] shmem_get_tree+0x1c/0x30 [ 88.112746][ T6277] vfs_get_tree+0x56/0x1e0 [ 88.117195][ T6277] do_new_mount+0x227/0x690 [ 88.121743][ T6277] path_mount+0x49b/0xb30 [ 88.126159][ T6277] __se_sys_mount+0x27c/0x2d0 [ 88.130935][ T6277] ? fput+0x14e/0x190 [ 88.134931][ T6277] __x64_sys_mount+0x67/0x80 [ 88.139585][ T6277] x64_sys_call+0x203e/0x2d60 [ 88.144358][ T6277] do_syscall_64+0xc9/0x1c0 [ 88.148929][ T6277] ? clear_bhb_loop+0x55/0xb0 [ 88.153649][ T6277] ? clear_bhb_loop+0x55/0xb0 [ 88.158350][ T6277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.164326][ T6277] RIP: 0033:0x7f458123dff9 [ 88.168756][ T6277] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.188382][ T6277] RSP: 002b:00007f457fe90038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 88.196833][ T6277] RAX: ffffffffffffffda RBX: 00007f45813f6058 RCX: 00007f458123dff9 [ 88.204987][ T6277] RDX: 0000000020000300 RSI: 00000000200002c0 RDI: 0000000000000000 [ 88.213057][ T6277] RBP: 00007f457fe90090 R08: 0000000000000000 R09: 0000000000000000 [ 88.221089][ T6277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.229071][ T6277] R13: 0000000000000000 R14: 00007f45813f6058 R15: 00007ffd971059c8 [ 88.237064][ T6277] [ 88.253973][ T6276] netlink: 32 bytes leftover after parsing attributes in process `syz.4.845'. [ 88.271293][ T6276] netlink: 32 bytes leftover after parsing attributes in process `syz.4.845'. [ 88.296015][ T3662] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.305989][ T3387] EXT4-fs error (device loop0): ext4_release_dquot:6902: comm kworker/u8:7: Failed to release dquot type 1 [ 88.371982][ T3760] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.484487][ T6313] loop0: detected capacity change from 0 to 512 [ 88.492560][ T6315] ip6gretap0: entered promiscuous mode [ 88.498189][ T6315] ip6gretap0: entered allmulticast mode [ 88.521387][ T6313] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 88.562800][ T6313] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.860: bg 0: block 248: padding at end of block bitmap is not set [ 88.577846][ T6313] EXT4-fs error (device loop0): ext4_acquire_dquot:6879: comm syz.0.860: Failed to acquire dquot type 1 [ 88.590210][ T6313] EXT4-fs (loop0): 1 truncate cleaned up [ 88.596510][ T6313] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.610778][ T6313] ext4 filesystem being mounted at /150/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 88.620197][ T6319] loop2: detected capacity change from 0 to 512 [ 88.632310][ T6319] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 88.647402][ T6319] EXT4-fs (loop2): 1 truncate cleaned up [ 88.654623][ T6319] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.916468][ T3760] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.022517][ T6334] loop3: detected capacity change from 0 to 2048 [ 89.060013][ T6334] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.106409][ T6334] xt_CT: You must specify a L4 protocol and not use inversions on it [ 89.107771][ T6334] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 89.134182][ T6334] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 89.146470][ T6334] EXT4-fs (loop3): This should not happen!! Data will be lost [ 89.146470][ T6334] [ 89.156236][ T6334] EXT4-fs (loop3): Total free blocks count 0 [ 89.162424][ T6334] EXT4-fs (loop3): Free/Dirty block details [ 89.168336][ T6334] EXT4-fs (loop3): free_blocks=2415919104 [ 89.174123][ T6334] EXT4-fs (loop3): dirty_blocks=16 [ 89.179286][ T6334] EXT4-fs (loop3): Block reservation details [ 89.185280][ T6334] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 89.214299][ T5301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.374416][ T3662] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.384943][ T36] EXT4-fs error (device loop0): ext4_release_dquot:6902: comm kworker/u8:2: Failed to release dquot type 1 [ 89.424328][ T6354] tipc: Enabling of bearer rejected, already enabled [ 89.435589][ T6350] hub 9-0:1.0: USB hub found [ 89.440319][ T6350] hub 9-0:1.0: 8 ports detected [ 89.612746][ T6366] loop0: detected capacity change from 0 to 2048 [ 89.630822][ T6366] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.661472][ T6366] xt_CT: You must specify a L4 protocol and not use inversions on it [ 89.662109][ T6366] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 89.685125][ T6366] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 89.697402][ T6366] EXT4-fs (loop0): This should not happen!! Data will be lost [ 89.697402][ T6366] [ 89.707208][ T6366] EXT4-fs (loop0): Total free blocks count 0 [ 89.713238][ T6366] EXT4-fs (loop0): Free/Dirty block details [ 89.719232][ T6366] EXT4-fs (loop0): free_blocks=2415919104 [ 89.725060][ T6366] EXT4-fs (loop0): dirty_blocks=16 [ 89.730199][ T6366] EXT4-fs (loop0): Block reservation details [ 89.736196][ T6366] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 89.751933][ T3662] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.762765][ T2967] ================================================================== [ 89.770872][ T2967] BUG: KCSAN: data-race in block_uevent / inc_diskseq [ 89.776633][ T6371] loop0: detected capacity change from 0 to 512 [ 89.777666][ T2967] [ 89.777675][ T2967] write to 0xffff88810105fe20 of 8 bytes by task 3662 on cpu 0: [ 89.784838][ T6371] EXT4-fs warning (device loop0): read_mmp_block:115: Error -117 while reading MMP block 0 [ 89.786228][ T2967] inc_diskseq+0x2c/0x40 [ 89.808109][ T2967] disk_force_media_change+0x9f/0xf0 [ 89.813400][ T2967] lo_release+0x2ca/0x400 [ 89.817740][ T2967] bdev_release+0x3c6/0x420 [ 89.822258][ T2967] blkdev_release+0x15/0x20 [ 89.826771][ T2967] __fput+0x17a/0x6d0 [ 89.830769][ T2967] __fput_sync+0x43/0x60 [ 89.835023][ T2967] __se_sys_close+0xf9/0x1a0 [ 89.839633][ T2967] __x64_sys_close+0x1f/0x30 [ 89.844236][ T2967] x64_sys_call+0x25cb/0x2d60 [ 89.849718][ T2967] do_syscall_64+0xc9/0x1c0 [ 89.854430][ T2967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.860353][ T2967] [ 89.862679][ T2967] read to 0xffff88810105fe20 of 8 bytes by task 2967 on cpu 1: [ 89.870229][ T2967] block_uevent+0x31/0x50 [ 89.874580][ T2967] dev_uevent+0x2fd/0x380 [ 89.878916][ T2967] uevent_show+0x10c/0x1f0 [ 89.883337][ T2967] dev_attr_show+0x3a/0xa0 [ 89.887758][ T2967] sysfs_kf_seq_show+0x17c/0x250 [ 89.892712][ T2967] kernfs_seq_show+0x7c/0x90 [ 89.897321][ T2967] seq_read_iter+0x2d1/0x930 [ 89.901920][ T2967] kernfs_fop_read_iter+0xc0/0x310 [ 89.907045][ T2967] vfs_read+0x5f6/0x720 [ 89.911214][ T2967] ksys_read+0xeb/0x1b0 [ 89.915385][ T2967] __x64_sys_read+0x42/0x50 [ 89.919904][ T2967] x64_sys_call+0x27d3/0x2d60 [ 89.924605][ T2967] do_syscall_64+0xc9/0x1c0 [ 89.929113][ T2967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.935025][ T2967] [ 89.937345][ T2967] value changed: 0x000000000000011f -> 0x0000000000000120 [ 89.944462][ T2967] [ 89.946792][ T2967] Reported by Kernel Concurrency Sanitizer on: [ 89.952954][ T2967] CPU: 1 UID: 0 PID: 2967 Comm: udevd Tainted: G W 6.12.0-rc2-syzkaller-00058-g75b607fab38d #0 [ 89.964689][ T2967] Tainted: [W]=WARN [ 89.968492][ T2967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 89.978563][ T2967] ================================================================== [ 91.468692][ T1918] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.532940][ T1918] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.592597][ T1918] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.652926][ T1918] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.739741][ T1918] bridge_slave_1: left allmulticast mode [ 91.745437][ T1918] bridge_slave_1: left promiscuous mode [ 91.751151][ T1918] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.761231][ T1918] bridge_slave_0: left allmulticast mode [ 91.766908][ T1918] bridge_slave_0: left promiscuous mode [ 91.772691][ T1918] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.882110][ T1918] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 91.893743][ T1918] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 91.904163][ T1918] bond0 (unregistering): Released all slaves [ 91.963566][ T1918] hsr_slave_0: left promiscuous mode [ 91.969492][ T1918] hsr_slave_1: left promiscuous mode [ 91.980179][ T1918] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.987591][ T1918] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.010557][ T1918] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.018060][ T1918] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.042512][ T1918] veth1_macvtap: left promiscuous mode [ 92.048049][ T1918] veth0_macvtap: left promiscuous mode [ 92.053685][ T1918] veth1_vlan: left promiscuous mode [ 92.058964][ T1918] veth0_vlan: left promiscuous mode [ 92.159802][ T1918] team0 (unregistering): Port device team_slave_1 removed [ 92.171549][ T1918] team0 (unregistering): Port device team_slave_0 removed