last executing test programs: 1m40.801112777s ago: executing program 2 (id=2776): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) r1 = syz_open_dev$mouse(&(0x7f0000000180), 0x6, 0x109002) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000080)={0x782}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000400)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000600)='kmem_cache_free\x00', r4}, 0x18) statx(0xffffffffffffffff, 0x0, 0x6000, 0x10, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r5 = socket$kcm(0x10, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081064e81f782db44b9040a1d08040e00000000000aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5a074edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x60}, {0x6}]}) socket$l2tp(0x2, 0x2, 0x73) socket$inet_udp(0x2, 0x2, 0x0) splice(r0, &(0x7f0000000280)=0x3, r4, &(0x7f00000002c0)=0x4, 0x7, 0xa) 1m40.712979597s ago: executing program 2 (id=2779): r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x800) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000040)={[{@nobh}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xff, 0x23f, &(0x7f0000000540)="$eJzs3T1oLFUYBuB3Zne95t5FrtoI4g+IiAbCtRNsYqMQkBBEBBUiIjZKIsQEu8TKxkJrlVQ2QeyMlpIm2CiCVdQUsRE0WBgstFiZnURisuLPxh1xngdmZ2b3nPnOMPOe3WbYAK11Nclskk6S6SS9JMXpBnfWy9Xj3c2p3cVkMHjsh2LYrt6vnfS7kmQjyQNJdsoiL3STte2nDn7ae+Se11d7d7+7/eTURE/y2OHB/qNH78y/9sHc/WufffHdfJHZ9H93XhevGPFet0hu+jeK/UcU3aZHwF+x8Mr7X1a5vznJXcP891KmvnhvrFy308t9b/9R3ze///zWSY4VuHiDQa/6DtwYAK1TJumnKGeS1NtlOTNT/4b/qnO5fHF55eXp55dXl55reqYCLko/2X/4o0sfXjmT/287df6B/68q/48vbH1dbR91mh4NMBG31asq/9PPrN8b+YfWkX9oL/mH9pJ/aC/5h/aSf2gv+Yf2kn9oL/mH9pJ/aK/T+QcA2mVwqeknkIGmND3/AAAAAAAAAAAAAAAAAAAA521O7S6eLJOq+clbyeFDSbqj6neG/0ecXD98vfxjUTX7TVF3G8vTd4x5gDG91/DT1zd802z9T29vtv76UrLxapJr3e75+684vv/+uRv/5PPes2MW+JuKM/sPPjHZ+mf9stVs/bm95ONq/rk2av4pc8twPXr+6VfXb8z6L/085gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYmF8DAAD//xFQbUc=") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000780)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xb}]}) 1m40.621255068s ago: executing program 2 (id=2782): bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB]) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018111d00", @ANYRES32=r0, @ANYRES64=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_dev$vcsn(&(0x7f0000000100), 0x10, 0x400000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x5, 0x31, 0x3, 0x7f}, {0x7, 0x9, 0x5, 0x8}]}) fspick(0xffffffffffffffff, 0x0, 0x1) 1m40.501835138s ago: executing program 2 (id=2783): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) syz_emit_ethernet(0x1f, &(0x7f0000000080)={@multicast, @empty, @void, {@llc_tr={0x11, {@snap={0xaa, 0x0, "0f", '~b^', 0x0, "00cfb759d0d50b000c"}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffa}, 0xe) listen(r3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x18) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r8 = open_tree(0xffffffffffffff9c, 0x0, 0x0) openat(r8, 0x0, 0x6a1c2, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r9}, 0x18) syz_open_dev$tty20(0xc, 0x4, 0x0) gettid() 1m40.481977779s ago: executing program 2 (id=2784): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 1m40.249916489s ago: executing program 2 (id=2788): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000540)={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0x0, @empty, @mcast2, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) 1m40.24949215s ago: executing program 32 (id=2788): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000540)={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0x0, @empty, @mcast2, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) 2.207255317s ago: executing program 4 (id=4917): r0 = open(0x0, 0x143a42, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000280)='netlink_extack\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) connect$rds(r0, &(0x7f0000000180)={0x2, 0x4e22, @empty}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="00000000000000000c001a800800058004000880"], 0x2c}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000000c0)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b700000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r7 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x68, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}, {0x4}}, {{0x1c, 0x1, {0x0, 0xe, 0xffe3, 0x2, 0x2, 0x7ff, 0x4}}, {0x4}}]}]}, 0x68}}, 0x0) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2a00a9, &(0x7f0000000000)={[{@nr_blocks={'nr_blocks', 0x3d, [0x39]}}, {@nr_inodes={'nr_inodes', 0x3d, [0x50]}}]}) 2.056543338s ago: executing program 4 (id=4921): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018010000000000000c90000000000000000800005f000010270000000000000000000008000927467dae4d60690dfb"], 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x2, &(0x7f00000000c0)=@raw=[@cb_func], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x9, &(0x7f0000000080), 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="b8000000190001000400000000000000e0000002000000000000000000000000fc02000000000000000000000000000100000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000ffffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000009bf23f93a967087a86068e58d54b49036bb9af2259f44b1428aaaf1d5a596eb38c43566b32"], 0xb8}}, 0x40) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_xfrm(r3, 0x0, 0x0) writev(r0, 0x0, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r5 = socket$inet(0x2, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffa0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000c80)="b9ff060000000000000014f086dde3359859cbce2d8e29ab5fa6e7b96ba2ccc052089a3370156442", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) 2.005424998s ago: executing program 5 (id=4923): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300002311f335850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008004}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00005fbd00000000000000008072d279880df2c652c353dfe28b1047fa68d5d566997a62b335f005bdc09638036b3aaa3372dddc9783889df351e0be295d0cd688bfea2af777b508d33433de264c9de88d798a6f68ef72d61ef2cadfa1754f09536a08223817cd6c32a435361c978c7c4c8e76"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800"/12, @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001c40)="d80000001c0081064e81f782db44b9040a1d08041100000000000aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040", 0xa2}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 1.919361259s ago: executing program 5 (id=4925): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) capset(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xfffffffe, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.880336579s ago: executing program 5 (id=4926): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r2}, 0x10) pipe(&(0x7f0000000040)) fcntl$getown(r1, 0x9) openat$vcsa(0xffffffffffffff9c, &(0x7f0000005a00), 0x10141, 0x0) lstat(&(0x7f0000005a40)='./file0\x00', &(0x7f0000005a80)) getgroups(0x3, &(0x7f0000000940)=[0xee01, 0xffffffffffffffff, 0x0]) 1.809627419s ago: executing program 5 (id=4927): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r0, 0x8004745a, 0x2000000c) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000001c0), 0x74) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) 1.374141352s ago: executing program 5 (id=4934): semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$selinux_context(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x5, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 1.295672112s ago: executing program 0 (id=4935): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000869000/0x1000)=nil) (fail_nth: 12) 1.139803513s ago: executing program 1 (id=4937): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000080), 0x6, 0x4eb, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getdents64(r0, 0x0, 0x44) 1.139407963s ago: executing program 4 (id=4938): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x2) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) capset(&(0x7f00000000c0)={0x19980330}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 1.100283944s ago: executing program 4 (id=4939): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2a00a9, &(0x7f0000000000)={[{@nr_blocks={'nr_blocks', 0x3d, [0x39]}}, {@nr_inodes}]}) 1.070737204s ago: executing program 4 (id=4940): syz_mount_image$iso9660(&(0x7f0000000d40), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000b80)=ANY=[], 0x1, 0x5b2, &(0x7f0000002740)="$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") chdir(0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) 905.874624ms ago: executing program 0 (id=4944): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r0, 0x8004745a, 0x2000000c) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000001c0), 0x74) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) 899.418595ms ago: executing program 4 (id=4945): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = dup(0xffffffffffffffff) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x9, 0x8}, 0x2000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(r2, 0x0, 0x10) ioctl$TIOCL_SETSEL(r2, 0x541c, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x18000, &(0x7f0000000000), 0x80, 0x62d, &(0x7f0000000c40)="$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") syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x1809049, 0x0, 0xff, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/mem_sleep', 0x111803, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0) sendmmsg(r1, &(0x7f0000003b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000280)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) r6 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441700322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6de6269613800"}, 0x48, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x4, r6, r5, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r7 = dup2(r1, r0) sendmmsg$unix(r7, &(0x7f0000001100)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}}, {{&(0x7f0000000540)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x20000000}}, {{&(0x7f0000000700)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="dac977998ac400000000"], 0x28}}, {{&(0x7f0000000a40)=@abs={0x1, 0x0, 0x4e22}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x20008004}}], 0x4, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x0, 0x1, 0x10, 0x1d, 0x22, &(0x7f0000000240)="400ab25d5d900984a1647bf8bc1d8522015d35c09b72b882229632a734ee8d9808e73742aa703f58179737d02ce54fc798741804f3f02e11fcd62e00f7e1a63e18e68cefe55536499d6fa3b10e0e2dae4c8e1b3ba86c0f0dfe55219838d2a3e29e73fedb2b22b381a016f495f02392433f6d8ffbf6cb561e2f14ab96b2d39eaf281a5bafee6e61a191271597c52749d194a9efd2ef101ef48ebb2cee380baa3b641ca5df56386ff5d2670bd843f6a58b116a62faa343f63ff4382ef27005e4e2c26ca90e333f8981a3baa2a3347ed62b95c159cf6fbb62fbdd6b5ddf6f270a529aa168164c1a4a3ee39618c2ac081b95ee08868c128be550678d4d1af6a5e224c01ce60aea34981e02aac7caf2a8658af7dcadc444d8375d649369efb1564000bca24b2af57217b30728ac290de447f996655a772d725a962753ca7f08595dc53e21687156d0944997b2baeecb2081a1e8d66c0a2606b2907a4fbf8e7d3758e34958bbcc8ae1f20f1f648eb16433b1b6f1f4bfdec042036ee40a0e797a70dc8cee3ef25459fb6be9deb7ec525008dbce8168cbb3b1278875f1e2d6dd597e65fe49d928206af9fd3854a4214020f7469c7f1308e17bcd906664c3de93b8fbceb4cc95cba679f0ccb0ad3c0a36f4e37650d4e62b137ebad90036bf8987048141aca08c3fec99cec3acb1d85f68121f19ca9cebde022172de411d509a5d265155afed3c4f30e269352eae7dc14e818230304a0c9cab538848547bba3377344d979d62e3b4b3f1959c9ba8d868b7956c29a9ac040af11faef33e96a9be217e66c2d9fd745516c30f3ec35b9e469ca085228785c058fbaf0c2624d7487d4ef832a7c2ab9a34ca9a2f8a53f5f6477cab035959407e19573e436315a5510bc3a0f2cbb99e29366a4e009b1b061bdb3b5fca3775000742e644870c68c00db7e434f747f3b50d58b108e87125e49593e4ec872db18d6415d08c7a06fc8d763c5a13c3d9e4107def34042e4f307c5959ceb74b3e0e215c91c172cf0efbc559d2bd0a93939e6a2f951a81e05b6a274c574eae4e53d656905f2efdb8c35167ddc79773bd5a7de742cb343b9167b1a82828dd54cbdc661a4f36f374d9a92967dd6f31536564f39df31bd0eadc09eb0f1d5d67f60a782d5fbcb2246e53907a0705b8d7de9fbec34b151b560b6aedd7d5af6b6b2a99fbb0e1840068a1a85fa550a8b83d4283a9e2a46bcb4330482a28cf9e126ff75ebd9f9e595f78a2d18cefe75ee5f9d3ec0316fb8ba90ec956f66b3e517b18a8e7eb621ff9a064dca897c36ed09ae394bc907696697899b6d9d0a41a7afb8204b5992fca22177eb7ba78eb74a423111c446a760a49319fb17f8926601b27a18dc47acbd9cf5cb077079d333b8bd2d33e93d72d4c14b0eabdddb9edb3b2ac23c6e562140735e247410a564d4dfd2ab1cc134c9c"}) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a3000000000a0000000030a01010000000000000000020000000900010073797a30000000000900030073797a3200000000080007006e6174001400048008000140000000000800024000000000580008800c000240"], 0xfc}}, 0x0) 894.233145ms ago: executing program 1 (id=4946): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) r1 = syz_open_dev$mouse(&(0x7f0000000180), 0x6, 0x109002) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000080)={0x782}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000400)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) statx(0xffffffffffffffff, 0x0, 0x6000, 0x10, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r5 = socket$kcm(0x10, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081064e81f782db44b9040a1d08040e00000000000aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5a074edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffec", 0xbd}], 0x1, 0x0, 0x0, 0x7400}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x60}, {0x6}]}) r6 = socket$l2tp(0x2, 0x2, 0x73) socket$inet_udp(0x2, 0x2, 0x0) splice(r0, &(0x7f0000000280)=0x3, r4, &(0x7f00000002c0)=0x4, 0x7, 0xa) bind(r6, &(0x7f00000000c0)=@phonet={0x23, 0x7, 0xb, 0x40}, 0x80) 820.778675ms ago: executing program 1 (id=4948): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000002180)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x0, 0x3fe, 0x0, 0x1c}, {"4b0eac93f047a2946f488d8a3f47592494e5f2d4c2fd6d"}}}}}, 0x4d) 637.359496ms ago: executing program 1 (id=4949): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4a, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet6(r1, &(0x7f0000000400)={&(0x7f0000000100)={0xa, 0x4e20, 0xfffffffb, @private0, 0x6}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000240)="16c70266f67a57fd94a0079d04858e0334d7c2f1559dbc484cbdcd3c2a4ff005b17832e87ca9921fe5e88a141b12f6b463f2b67233125fc6d1a6e5dd59ed7e8e17b8d2a81f9212ab0b862d4e0b4df7c8891f67e86238242e4f96ec3f88b84cdc77bad32f6996afe0f967573b8e1fe2b77cdf928fa92dcdeb9754a94bbeb8c46b64d1488010019418a5aff8682697f1229dbd25bdbc209728ae7956c030d28707458e53c1b5b809e6c2ac816f54a5f65037849685e7a92e163f321136bc9c05373891eb2368b7c0866963887d466d700ef2a29933b0ed5d533c", 0xd9}, {&(0x7f0000000800)="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", 0x1000}, {&(0x7f0000000340)="428b6e1398bd6d255158909f30e50940c816cf8ebdd7f611c7fd39348c73d9e37083cbf05f23753d2180a3398c29330bb9a735767ed20e99dd9b32cb054a6a96b3e14d042361b87664cffac489a966e3cc6a76d26409547b79e8697788be0f85e230544458133d687b21f6edb98b4dd3122a20fa8e417b3ea9ef3e2a6ec01d5636349a6696f44a9f6af1280161ffef1080a6df9b64196c7206dad76a5e4ee7e83e7ab614c6", 0xa5}], 0x3, &(0x7f0000001800)=[@tclass={{0x14, 0x29, 0x43, 0x101}}, @dontfrag={{0x14, 0x29, 0x3e, 0x8}}, @hoplimit_2292={{0x14}}, @rthdrdstopts={{0x1020, 0x29, 0x37, {0x2, 0x200, '\x00', [@generic={0x6b, 0x1000, "4883d250c1700837bb2cacc3397b67d3dedf6515fa643fe465de6f7fc800722b73b7a5fe1ba230e5e5fe39339a43443fdb116efd17ea4e6a7f410cd0ddad57a76f2ff13b479e7a4ae6a87b5bbafeabacad44d547639fd36fde47011a21d6552591a4a880e01e60c6429060e1a069176dbbfdc6217fbdad468d51578ee776d9e90108458dc9c3ff460c805846a423dee23986e11238e12278081ecefdac89dc01798cdab5086cbca1911e6993587b6aebab000af183e6287bed2fa7dd9b90529ea8fefbbc3d60ba06df867ae85cc02ffda0269782af09821f35c72e433c1b1ec6479022bd4495c3c1609d006a55d5d1d5e7dfe51704c7632f52240776b1c3ef9d8556e7bed78f4b3e8cef57f978f3128a7fbeeff110415a23920e4dc2ad96dfed4d481251340a7754c58fcc4efd4580e29c1c179d76b2eceaeb777628287416716e40049f1c663d9a5630b4384921aa7fef54b3cf9318925b2b57582b3b445937bdc997131a13c5a8b14cdf82c3e3970c1995050150f27c9b5d70a96fcb84d2661b936f5ac0c5da028927d1fcd172e4ed81be756adf21549f76f189990fbbf26c9f107cf3da351a57047bf7b26d3054cc619c0117d7890ff62dbb52754d00b1e0697e0fa4ce1e18f380389a3d907cde57c20ab671210c5a7f8f88ed5db5c7360161aa7a13fb9872faa7f4d7b3256c6f621f5ace8a38658cb07aebead47d80f6cc63285a24c1f4068e9d12415eace65d553379a08628c8b74d9f8cdf68791fd2adef982a62f8ea18c582e0f63500284df3b3b0e665d9322f9da14d75764ea390b6ddfc32dba3a47ad19fc960bcee150797b8dbd0fc6edcee51494fd71a50ae96f303c2a4743f9c504e87d71b92a6a318381723df91785af82b8720cba882360f0ac3be9320a380d8629a96a443b210c4ae78899186440f305a4396f8afaa2919541c73fabd085a6c3b48f24c4497ba689fb17558e092ada5f89e06951988c256e6700a1de236384f52868e9cf2de656d6cdd2fa08e627c65a645d8c681b36966df5f07977f35205266ffe8cf918093a9708843bdb2f41e107b1876f1843c026ee8eef910d6f7f5071ecfe47f4350e86ba1cc6d19dd0ae96ff3be44efddefff8406532f36dee6e3cf97d319753b29a81c73d4861ada6b7b094d8cb02433501fee9484d66d2bfa9df38f3aa2b8ca4c1f787796c31437a207d4ccf5a73f117fddb28ced9f99a78cb91b7b41a148500e623915b1f3b3b4b59ac0e25dd59ac928869065812974149cefaebdbb536fc9ed0318ac27db5b0ad2906bc3d910beccb8c98132ee7c28aded82aa868af7cf41d054a809a8d0438dd69bb59793a01e8888f1f22569488973f4575656447d8859fd1fcf6f7b760b6dd4b3d4acc330fe6776b1cb88004c8a61543c7eefcd17d598f39857e79ed57177a18ac0c9588981df4d73004980053697e80e7515f610285eb491ced085f011e86006eb35d92159cd4301c8d420dc12e8fc23ddf02c58827f59cd57461109a157eb41625f1fc0772a025faa7e1d4e991673de75b141646449a0c0810def5261a691874e6e7b2576364b42ebdba0f0e7d52ba99671de3705ecf7dd33e6068e26c1704407ba072009c16fe01028addc55ab9ece5f42c3540a9bf1767a4416678e4e46cb8d4f0b30cabe6c7db9f6a85ab6ffaf4c610a8d3acdade2bf60390ebe79978adcd4f4d661121ff06648accb4d45822a26ea3d6fae33c52ba029094849da02cdec83dd7710250a900d2a932e0f96afeeac156e436774b1773b5f441291d3cf718596c285c5c67fc10dec745b989379d10dc508bca4cd1899b512b2bfd8e5c8458d06141b8c2ab1210a783fdaa3d24820b05972c475133832b06ea504c06b746561ca23c8f3d936e9bfacb74da989d6783ea76247ef52f8bdacd032c2da018d3583598d2733e8a14c0ea970070029589b99a51d52fa69c71eb6e4b849bacef2bf9a9d54b6cd14f4ec7be486153d6d0da53fdbdad47c5c326a8b54e4afc8b6c126a81cecf2e7875bbadf0bfe1b839389eb3a5ac7f2c4fb17dde4f54fb9bd915907831956b1cc4c4d8b954c4ed8a7650651a55715951eb12082297cf99f7f01fb1dea09471209785c4bbc06aa33bc5d76f27ba93e31e6d9130da8b9526e8a1a693f5970ef7f02342d7af86d4dc03a3ec1511b0b21ba550797d46a1695449e26691586a558a9da2d560a8bdb7cfb494cda209be44b91a4e527d1f079f4b5e610a7fbf45c1da2c2dd8ae9fe396ef28e21bfb1e350983a9d8bcdce40a74a8cbe202a603807ffebc9cea06bbef65037f872ea9cab99509e50929c321adf2e6118e98a5f86ce7f3eacc7acc8e78a05955ba3ca169d8ac9ad384d6ec143c2f590b694584e079ffb9b4ba65f92140a713348df29a09b595e505631271b3cedfa517c29241039a8d5ed69fb4659c9c09640a192bc039df5f78eb7b9432abe7c53ddff69d54a58605e369ee0210193522ad6f52ba0c97d2ccc9b1ca469d2c5011c12c10aa3417fcbb56ffca44591c79f62ac2589c9b6a064fd294cb017ecdb317b0b3ad2c99d260fe283cd75f7fe1c16e2e289215090ffc31407dc9f59f6339523c5d54b19c6a3785b5bb7af7534fc83a7034c95fe531063a084177354c549424cffc65d924447a6d65d011d4ddabbb502e32038f1382640c4a4b8e268557e70b5291dc0b778a3bfb5dcc801b3a7ab5ab9d13360093ab8f892f451e4fa5d378c8ec500d0082ce0c053bd866e362d6dfa0f9f1a8d0d96f669e7ebee44640b6247cc4c35d615adfa29809139f87d36c5acf4fb7bd4c4bdb656fad0563019fd3e820a510e945257a0f2abc4a3aba5bf0f4591904a0c0e15263234db92d14aac557801f38cb75148e6691fb323785e49ddc41ca0a64bf6de9c47bd796b13822a8617591f3e7f904ccff716ca75993bac38290a237140236ef43ca40035edf7217a16b562e3843e3b9a46d61d7f39ea16fddec8e0224c3e9570e2aa4234cabc1eed4ef2321db6d558c300e2a2b944ee4d339603863e87afae5069612b6598f1b7f150f9a1098a4d78de7eea9ed10eecf430fa6bfe75f8e1535cee5059c2efd2a3209f10a0e2da5cfe96d59b55d2dccdf997a57f1ce7bf81ec7c78fbf148543d77d5b887cdbf45ee459ef555b0ba8eaf2202b37fc5bf1f72c0464ac7d023d52a9715f40e0de405334b8c3594a69803f90087431766f4d8abefe26a9fe411116ce98205d64825a35a15b422ce8081f1645fb7c7ab4ad2b657eda144ba76e44a949b36d81598c9ca5b2f8672352774b26c4ceb1d57fbb2fb822e42c686cd83b9c4fa288c07098c478b7bcf537243e156ee8b73a4ecab8d844ebb6866e2f3c2e90bb01719f18aebc68dbd602651a6e77a5b84be4ffb18bbe76c75bcc1292f52d031c97fafa23d590724d5bd33ec2ea05c960dcdd43383c25a1b4c3bf286c63e2b05208a54c0414a8fbf84ccb84908083823cf27c8a35c35e12e6c62375ab3c926a1173be3a4457a7a04c99352d6fc0e962ff82cd79ba806b17e1486629a0e9322e32d92b7dc9c867797157ffb278fd2d77cd6f2cfc6416eee3fec441f2ae68b9260308d16091736fd058bb035272653483fdae491a4f0d63239507f9b0dbcc4e5fdc7a68414e120e763511722d6f36e628159482ad4906d8e88128581428c578eafaacef56e668f04522320ed8b29782979d43fba1c51169a5cb1ad042e04152b03440375977962dfcc3525871a066b2032e97434ba97d5e1a42a041e9fbcb969a5e29c176f39974c343c6dd28b9fc98e7c6af38ad2147e7c7619116233211b987e1023833617080196b593121006ff284102ff5235e28d88242f6676fa7ed3c557111d19fac1120a39f26d44d913f8b774d4ad3f6ae2cc2a295532f47e3b94ff4d20492679a53253295c9370006b1c7f161427feb6529467caf404d055ea7ea57b9d75026fa81ccaecd6c2e074fcc2598bf7d60c32f1d7b8e98104ab26707a90bf14936c5f6436c478d846d54cc74a7407ff7a2549d30093a8aa9cdef3fac999fa964d5638b995a1da14471a28da8f518f36eee55c633f3af4358dbfd29c3ae512fcd9150342f571b011d47c85b0f5798bba0bafbf6a2fb9cc6e79dffdff50ffbc68c18acd836231112a9c3945146e26b69000f41321341a7a7603f39f0f598e88a5f6fa935f5b09f7456c84a615770a23f1b4102ec49b57bcfe1c7605d2ef0bd9581cf1dd21a91b458456b81ce1f82f4915611832b6a87f80f6b397742ce42981f384507dc3e9f100e6881f221e982a0d1bf57ca93bff4d9f654e1a373f9722a0a168e83f00e154ec96ac4ed95d22a274a266185ea58a4a374e0d1d933e236470c7db7a52ad6bdc817cd4dba73506a989ecec2e146515b4d9fe3ae0e3dfea2da19ab657c2cf4a98a928a6c36ec6d2466fec651397a6a7d48e1e347101b36df0821d4cf7fd936044c6a46ab4e625e579c0f78d7e06d9742fc230ade1384a95f341313f2090df52930be39050d26b61d2590493951a3a12eb4397acdfc59da21dd184866e5aa225873d9a648e1d1839d362c85f134caafab7bba54a9a88bb417b4f27664c8990a3678ce285367c70f321f44d8cd688b3024e454aa3f575d64b9d12e52dd051c902dcbbeec83f363eba6093747d5664fb3f600a1249bc413eb7163b319e2c93b23c950333775e203768d8259ff49ecacd890584520ca6ccac237ab492bc61d971b0c33ca493e7318bf697391e06455d1fd79432b47152173b3553cad31265d447b93f106c6f3b4c005f0142c9986da95737158caef9fbadec6b4de4e4eed5bcb47094aa51fea86ec40cf9e858297fe8d44b4ac6cb4f912560b6a58e5363ede33c9ded070805f9a982be9df2bb5789f39073fa3da7c2844b9c045b68a65acb4eb0dcec008bb2d4b955ee3254bf6ae2d199dd1abcca5a362b57fd4ccf3cdd6255411babc98f21cf4a7e35cc365bd625b6b94a70d606c18335cd70af8ab6d7595aebe41479e184e80ae3fd012e12d940f286e47d52bfe2684f90cc4306896f11b6bf0536a67696efd1b949da08f041cdf02f09f9941fa97c310f4241304290d1bf74e8ce8ada0b2988c5dc6c8f16aaee1882f030baf03b081315b4778bbd6e84084710d77bbad39371b066436fc04fbca1d49559a45f86a67ae322ffa2abb1d86e8bab23ab38fcd259d08fe0ef4afd4d7a46ffa7e2b86e92e791287dc0c3d27c2d54b1cdc79aa6f7c72b0a40917a827753f8f177ec41e9e9d894b06037a91219593e291d23e46b304a1de27347cebaf272f6856a0b34fdb3872745714fa1b7677632dea4be277f415c10d1bd435dbbe43cca70dddb76715919e07176fd757b6605084c5554665794ee979fc9b31e4cf2946dd628ab25c04a85ad01cf86b48134e3170d2218b74dff8088642f0b659dbbbbb077c0dbf0111eaa123498026f3ccb5e939795db195525ed2431378ebd181984c2c22d192dd08000d463ee52bde6fcb81b5eac1f832f7246ce7548ec0914d27f47a71ae9c57714d128c6a2740eece36fdd6a988c1bbea7dee2bc489e96497ca5f7902f76b8dfc87f7c4a4472acacd6be2a0a3c4c769f9f1ddd29619bc708309b04e9e38138edbe33fc7fd413a4e056be0c3802e35b7d35e93795f229d016bc719054b5cb1cdf191db56ac65836a377a6e28a30bc0add6b7794202ec97920a03cc17ca46f0eb8a4a112b56011a64a9e21dab878e6e16f1bdbd77d633255ff6ff779038afd16eaa230f3f307700dea9ba2705ad7b35ef97aa074df568ef09753ce"}, @pad1]}}}, @rthdr={{0x58, 0x29, 0x39, {0x1, 0x8, 0x2, 0xfb, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00']}}}, @flowinfo={{0x14, 0x29, 0xb, 0x200}}, @tclass={{0x14, 0x29, 0x43, 0x7ff}}, @hopopts_2292={{0x38, 0x29, 0x36, {0x6c, 0x3, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x8, 0x11, "7bd25b1bca92847e4d917fb449cd1a03cf"}]}}}, @rthdr={{0x98, 0x29, 0x39, {0x2, 0x10, 0xed1195d7b1e168f8, 0xb, 0x0, [@mcast1, @remote, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @multicast2}, @mcast2, @mcast2, @loopback, @rand_addr=' \x01\x00']}}}], 0x11c0}, 0x20040000) r2 = gettid() r3 = epoll_create1(0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000200)={0xa000000a}) finit_module(r4, 0x0, 0x0) tkill(r2, 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='svc_xprt_dequeue\x00', r0, 0x0, 0x5}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x7, 0x0, 0x7ffc1ffb}]}) shmctl$SHM_LOCK(0x0, 0xb) 501.103927ms ago: executing program 1 (id=4953): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r0, 0x8004745a, 0x2000000c) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000001c0), 0x74) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) 468.058937ms ago: executing program 5 (id=4954): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200001400894fb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cf8ff0ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d000200390001400400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = socket$kcm(0x2, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000280)={&(0x7f0000000300)={0x2, 0x4e1f, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000500)=[@ip_retopts={{0x10}}], 0x10, 0x5}, 0x2000c014) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) socket(0x10, 0x803, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x400000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8b, 0x76}, [@call={0x27}]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read(r5, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r6], 0x1c}}, 0x0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000380)=ANY=[@ANYBLOB='showexec,nodots,nodots,nodots,dots=nodots,nodots,quiet,nodots,flush,umask=00000000000000000000000,dots,dots,umask=00000000000000000077777,nfs,dots,tz=UTC,dots,dots,nocase,nodots,codepage=950,\x00'], 0xfd, 0x1bf, &(0x7f0000000840)="$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") 377.293148ms ago: executing program 3 (id=4955): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) r1 = getpid() setreuid(0xee00, 0x0) syz_pidfd_open(r1, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="90be265e4bf7fd79609564fbd9b18242c0575ceb281e91509d82990f2950b26d3a2ba6a3b4780ebe286404bea12b1d1726145a3255383a37879641c1661b1a0df73d7bdb3692efe950aaf8dd52f20c07d09c22745253648ba2cf409cbd4be27715b43912320af47e275f64ddb86cb51445518663dcf5fb90ec85c0354ea2f7240217ebfed53d7f6a91b9ab2a06b699646c133a36d67d9b1b109afe166c1b1bc53f9628d6d9b8fe99c5839ffea5a070c6df33de92a186a7f4d18d3ff51e9627a15e902a3c293502adc5fcf996a5eb564a"]) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=r3, @ANYBLOB="600000000040000008000300", @ANYRES32], 0x50}, 0x1, 0xd, 0x0, 0x480c5}, 0x0) 362.894888ms ago: executing program 3 (id=4956): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x2) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) capset(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xfffffffe, 0x2}) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) 339.110468ms ago: executing program 0 (id=4957): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) syz_io_uring_setup(0x673a, &(0x7f0000000480)={0x0, 0x5, 0x4, 0x0, 0x44, 0x0, r0}, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@ipv4_getnexthop={0x20, 0x6a, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NHA_MASTER={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x7f}, 0x18) socket$kcm(0x29, 0x2, 0x0) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}}, 0x20008040) 269.620598ms ago: executing program 3 (id=4958): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) r1 = syz_open_dev$mouse(&(0x7f0000000180), 0x6, 0x109002) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000080)={0x782}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000400)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) statx(0xffffffffffffffff, 0x0, 0x6000, 0x10, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r5 = socket$kcm(0x10, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081064e81f782db44b9040a1d08040e00000000000aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5a074edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffec", 0xbd}], 0x1, 0x0, 0x0, 0x7400}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x60}, {0x6}]}) r6 = socket$l2tp(0x2, 0x2, 0x73) socket$inet_udp(0x2, 0x2, 0x0) splice(r0, &(0x7f0000000280)=0x3, r4, &(0x7f00000002c0)=0x4, 0x7, 0xa) bind(r6, &(0x7f00000000c0)=@phonet={0x23, 0x7, 0xb, 0x40}, 0x80) 235.742288ms ago: executing program 3 (id=4959): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000002180)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x0, 0x3fe, 0x0, 0x1c}, {"4b0eac93f047a2946f488d8a3f47592494e5f2d4c2fd6d"}}}}}, 0x4d) 228.463649ms ago: executing program 0 (id=4960): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@deltaction={0x14, 0x18, 0x1, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) 197.444618ms ago: executing program 0 (id=4961): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00\x00#\x00\x00\x00\x00\x00'], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'gre0\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="1b0000000000000000000000000004000000000093012b1cca506f8c718077e13e4610eb980de4d5e9e479e9762437f5ed9518e8a4d5405b39bb6e535200a3ed5e8aa03588971dfd7c0990247e2528e4f5b8afa43778c1cf9ac1db42109651a7", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3, &(0x7f0000000d40), 0x9, 0x61d, &(0x7f0000000700)="$eJzs3U1rXFUfAPD/nbwnz/MkDQ9qXWhAtAVt0qStFBG0CK5KqS8LwY1jk5ba6QtNRFMrTaFuBHHjQnDlwrrwO2hBcOUXcOHGlVSKSDdK0ZE7uTNOk7nJTMzMtJnfD8Y5556bOeea/HvOnDnnTgA9ayr9TyFid0RcSCIm68r6IyucWj3v9m+XT6SPJMrlV35N4vKVZKX+tZLseSwi0oI/xyP5LiIm+9bXu7h86UyxVFq4mOVnls5emFlcvrTv9NniqYVTC+fmnp47fOjgocOz++t+6uSLrV7frrr00WtvvTP+4bHXv/jsTjL75Y/Hkni+VpZeV6uvvZmpmIpypv54+v/18HZX1iV9tb+TfyRrD6z1QhsbREuqv7+BiHgwxqOv7rc5Hh+81NXGAW1VTqLWRwG9JhH/0KOq44Dqe/vm3gcPtnlUAnTCrSMRT9TifyAiqvHfvzo3GMOVuYHR28ld8zxJROzfhvrTOr7/9ti19BFtmocDGlu5OpTN26/t/5NKbE7EcCU3ertwV/wXsmnciWz+8OWNqxnPK5hak8/qH9rq9QDNW7kaEQ81Gv9vHv9vZM/p8Te3WH9O/AMAAAAAAABbcONIRDzV6PO/Qm39z2CD9T9jEXW757Zu88//Cje3oRqggVtHIp5tuP63UD1loi/L/beyHmAgOXm6tLA/Iv4XEXtjYCjNz9a/6Fd1Px0R+z6a/DSv/vr1f+kjrb+6FjBrx83+NauB5otLxW24dOh5t65GPNyfv/4n7f+TBv1/Gt8Xmqxj8vHrx/PKNo9/oF3Kn0fsadj/J7Vzko3vzzFTGQ/MVEcF6z3y3sdf59Uv/qF70v5/dOP4H0rq79ez2NrrD0bEgeX+cl75Vsf/g8mrfVG3E/Hd4tLSxdmIweTo+uNzrbUZ7ifDzZ/6fkRU4qEaL2n8731s4/m/2vi/Lg5Hsnt8NeOBv8Z+yivT/0P3pPE/v3H/P3F3/996Yu76xDd59R9vqv8/WOnT92ZHzP/BxpoN0G63EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADuR4WI+E8khelaulCYno4Yi4j/x2ihdH5x6cmT598+N5+WVb7/v1D9pt/x1XxS/f7/ibr83Jr8gYjYFRGf9I1U8tMnzpfmu33xAAAAAAAAAAAAAAAAAAAAcI8YW31at/8/9XNfV5sGdEJ/9izeoff0d7sBQNeIf+hd4h96V378/36nXNHR5gAd1Gz/X77S5oYAHbfF8b+PC2AH8P4fetVAc6cNt7sdQDfo/wEAAAAAYEfZ9eiNH5KIWHlmpPJIDWZltQ8GR7rVOqCdCnkFQ51tB9B51vBC77L0B3pXk4t/gR0sqaX+aLjZP3/1f9KeBgEAAAAAAAAAAAAA6+zZ3cT+f2BHyt3/D+x4G+z/b7Sxx+0CYAex/x96l9t8AdXBft43/dv/DwAAAAAAAAAAAAD3gOFLZ4ql0sLFxeWmE1daOfnfJ36JvKLnOtmM7UqsFO+JZtwPiYGIWFNUHl/9sz1TLL0WnW1PNWI6UddgB+vKSXTp3yMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCdvwMAAP//emUoLA==") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000340)='kfree\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) finit_module(r2, 0x0, 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'pim6reg0\x00', 0x0}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="2d8e261000000000140012800b0001006970766c616e00000c00028008000500", @ANYRES32=r7], 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c00000013000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000000c001a800800058004000880"], 0x2c}}, 0x0) mkdir(0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 116.672169ms ago: executing program 3 (id=4962): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2a00a9, &(0x7f0000000000)={[{@nr_blocks={'nr_blocks', 0x3d, [0x39]}}, {@nr_inodes}]}) 97.895449ms ago: executing program 0 (id=4963): io_setup(0x8, &(0x7f0000002740)=0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000008, 0x3032, 0xffffffffffffffff, 0x76172000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4, 0x0, 0xfffffffffffffffe}, 0x18) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4318, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000002, 0x0, @perf_bp={0x0, 0x7}, 0x1001d, 0xc8, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd3}, 0x0, 0x8, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0xfdef) io_getevents(r0, 0x4, 0x63, &(0x7f0000000000), 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) io_getevents(r0, 0x7fd, 0x7, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000140)={r11, r12+10000000}) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETOFFLOAD(r10, 0x400454c9, 0x13) 73.348629ms ago: executing program 3 (id=4964): semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$selinux_context(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x5, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 0s ago: executing program 1 (id=4965): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x7, &(0x7f0000000080)={@remote}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r1 = dup(0xffffffffffffffff) ioctl$PTP_EXTTS_REQUEST2(r1, 0x43403d0e, &(0x7f0000000000)={0x56a1, 0x4}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="00400f0000f1f9fa4f4ace5145bac2380000000000000000ee0000000000005236900a16a205e31d93f80777d0fd024309b3c7dbcb8239307155c64637e44aaa0ce97f78daa7e414ded2646a37eb669253ea8332952f6775874fef3094582e4f285e738f6af8c68e0e3f5a4971d36ea259683390c00ebef730da27e308aca903bc4b6265b9307af78d3bae5d55bd5a34aae63df4c9d294bc3c1e39e57121c095f4e6e39c1257be79eb4ef8aec2f69c97c30a854be6305b6887e8454c32f467da9d1fb8ae178fe9d98254801af792987e4848289d2e923eee32bffd7e7de2094d55ed855d69d173ac89b66ff2254643", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) (async) mknod$loop(0x0, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, 0x0, 0x0, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r2, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x7, 0x8, 0x3130, r2, 0x3, '\x00', r6, r1, 0x0, 0x4, 0x4, 0xf, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], &(0x7f00000012c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @ptr={0x0, 0x0, 0x0, 0x4}, @func={0x4, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000080000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, 0x0, &(0x7f00000002c0)}, 0x20) kernel console output (not intermixed with test programs): 0 netdevsim0: set [1, 1] type 2 family 0 port 33311 - 0 [ 182.058673][T14158] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 33311 - 0 [ 182.067947][T14158] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 33311 - 0 [ 182.076862][T14158] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 33311 - 0 [ 182.085832][T14158] geneve2: entered promiscuous mode [ 182.091066][T14158] geneve2: entered allmulticast mode [ 182.280211][T14178] loop0: detected capacity change from 0 to 2048 [ 182.280445][T14181] loop3: detected capacity change from 0 to 256 [ 182.319539][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 182.327152][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 182.332375][T14181] loop3: detected capacity change from 0 to 1024 [ 182.334665][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 182.348046][T14178] Alternate GPT is invalid, using primary GPT. [ 182.348281][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 182.354651][T14178] loop0: p2 p3 p7 [ 182.361773][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 182.372981][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 182.380566][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 182.388275][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 182.395860][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 182.403405][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 182.410988][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 182.416658][T14183] loop4: detected capacity change from 0 to 2048 [ 182.418418][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 182.425653][T14181] EXT4-fs (loop3): can't mount with journal_async_commit, fs mounted w/o journal [ 182.432079][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 182.448936][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 182.456396][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 182.464031][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 182.471709][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 182.472321][T14190] ÿÿÿÿ: renamed from ip6_vti0 [ 182.479129][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 182.479152][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 182.479188][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 182.506171][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 182.513587][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 182.524212][ T9] hid-generic 0000:0000:0000.0002: hidraw0: HID vffffff.fe Device [syz0] on syz1 [ 182.544652][T14183] loop4: p3 < > p4 < > [ 182.548841][T14183] loop4: partition table partially beyond EOD, truncated [ 182.555977][T14183] loop4: p3 start 4284289 is beyond EOD, truncated [ 182.562561][T14192] tipc: Enabling of bearer rejected, already enabled [ 182.644510][T14197] FAULT_INJECTION: forcing a failure. [ 182.644510][T14197] name failslab, interval 1, probability 0, space 0, times 0 [ 182.657430][T14197] CPU: 0 UID: 0 PID: 14197 Comm: syz.3.4260 Not tainted 6.12.0-syzkaller-09435-g2c22dc1ee3a1 #0 [ 182.667978][T14197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 182.678024][T14197] Call Trace: [ 182.681289][T14197] [ 182.684248][T14197] dump_stack_lvl+0xf2/0x150 [ 182.688858][T14197] dump_stack+0x15/0x20 [ 182.693009][T14197] should_fail_ex+0x223/0x230 [ 182.697707][T14197] should_failslab+0x8f/0xb0 [ 182.702360][T14197] __kmalloc_noprof+0xab/0x3f0 [ 182.707174][T14197] ? genl_family_rcv_msg_attrs_parse+0x75/0x1a0 [ 182.713419][T14197] genl_family_rcv_msg_attrs_parse+0x75/0x1a0 [ 182.719598][T14197] ? ns_capable+0x7d/0xb0 [ 182.723925][T14197] genl_rcv_msg+0x470/0x6c0 [ 182.728513][T14197] ? __pfx_ethnl_act_cable_test+0x10/0x10 [ 182.734234][T14197] ? __dev_queue_xmit+0xb6e/0x2090 [ 182.739426][T14197] ? ref_tracker_free+0x3a5/0x410 [ 182.744475][T14197] ? __dev_queue_xmit+0x186/0x2090 [ 182.749691][T14197] netlink_rcv_skb+0x12c/0x230 [ 182.754447][T14197] ? __pfx_genl_rcv_msg+0x10/0x10 [ 182.759508][T14197] genl_rcv+0x28/0x40 [ 182.763494][T14197] netlink_unicast+0x599/0x670 [ 182.768256][T14197] netlink_sendmsg+0x5cc/0x6e0 [ 182.773077][T14197] ? __pfx_netlink_sendmsg+0x10/0x10 [ 182.778397][T14197] __sock_sendmsg+0x140/0x180 [ 182.783095][T14197] ____sys_sendmsg+0x312/0x410 [ 182.787851][T14197] __sys_sendmsg+0x19d/0x230 [ 182.792487][T14197] __x64_sys_sendmsg+0x46/0x50 [ 182.797272][T14197] x64_sys_call+0x2734/0x2dc0 [ 182.801944][T14197] do_syscall_64+0xc9/0x1c0 [ 182.806505][T14197] ? clear_bhb_loop+0x55/0xb0 [ 182.811182][T14197] ? clear_bhb_loop+0x55/0xb0 [ 182.815916][T14197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.821806][T14197] RIP: 0033:0x7f17a8a5e919 [ 182.826224][T14197] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.845822][T14197] RSP: 002b:00007f17a70d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 182.854223][T14197] RAX: ffffffffffffffda RBX: 00007f17a8c15fa0 RCX: 00007f17a8a5e919 [ 182.862241][T14197] RDX: 0000000000000000 RSI: 0000000020001ac0 RDI: 0000000000000006 [ 182.870277][T14197] RBP: 00007f17a70d7090 R08: 0000000000000000 R09: 0000000000000000 [ 182.878242][T14197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.886216][T14197] R13: 0000000000000000 R14: 00007f17a8c15fa0 R15: 00007fff3893b448 [ 182.894180][T14197] [ 182.968646][T14203] loop3: detected capacity change from 0 to 2048 [ 182.995768][T14203] EXT4-fs (loop3): failed to initialize system zone (-117) [ 183.001427][T14211] loop4: detected capacity change from 0 to 164 [ 183.003078][T14203] EXT4-fs (loop3): mount failed [ 183.033327][T14203] program +}[@ is using a deprecated SCSI ioctl, please convert it to SG_IO [ 183.053096][T14216] FAULT_INJECTION: forcing a failure. [ 183.053096][T14216] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 183.066227][T14216] CPU: 0 UID: 0 PID: 14216 Comm: syz.5.4267 Not tainted 6.12.0-syzkaller-09435-g2c22dc1ee3a1 #0 [ 183.076749][T14216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 183.086808][T14216] Call Trace: [ 183.090123][T14216] [ 183.093189][T14216] dump_stack_lvl+0xf2/0x150 [ 183.097962][T14216] dump_stack+0x15/0x20 [ 183.102123][T14216] should_fail_ex+0x223/0x230 [ 183.106812][T14216] should_fail+0xb/0x10 [ 183.111017][T14216] should_fail_usercopy+0x1a/0x20 [ 183.116085][T14216] _copy_from_user+0x1e/0xb0 [ 183.120744][T14216] do_ip6t_set_ctl+0x42c/0x8c0 [ 183.125512][T14216] ? kstrtouint+0x77/0xc0 [ 183.129860][T14216] nf_setsockopt+0x195/0x1b0 [ 183.134544][T14216] ipv6_setsockopt+0x10f/0x130 [ 183.139304][T14216] tcp_setsockopt+0x93/0xb0 [ 183.143866][T14216] sock_common_setsockopt+0x64/0x80 [ 183.149058][T14216] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 183.155003][T14216] __sys_setsockopt+0x187/0x200 [ 183.160016][T14216] __x64_sys_setsockopt+0x66/0x80 [ 183.165101][T14216] x64_sys_call+0x282e/0x2dc0 [ 183.169805][T14216] do_syscall_64+0xc9/0x1c0 [ 183.174379][T14216] ? clear_bhb_loop+0x55/0xb0 [ 183.179073][T14216] ? clear_bhb_loop+0x55/0xb0 [ 183.183824][T14216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.189802][T14216] RIP: 0033:0x7fc449ebe919 [ 183.194218][T14216] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.213817][T14216] RSP: 002b:00007fc448531038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 183.222228][T14216] RAX: ffffffffffffffda RBX: 00007fc44a075fa0 RCX: 00007fc449ebe919 [ 183.230187][T14216] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000007 [ 183.238197][T14216] RBP: 00007fc448531090 R08: 00000000000004a0 R09: 0000000000000000 [ 183.246157][T14216] R10: 0000000020000a40 R11: 0000000000000246 R12: 0000000000000001 [ 183.254117][T14216] R13: 0000000000000000 R14: 00007fc44a075fa0 R15: 00007ffe8f374498 [ 183.262079][T14216] [ 183.292027][T14214] loop1: detected capacity change from 0 to 2048 [ 183.330837][T14224] FAULT_INJECTION: forcing a failure. [ 183.330837][T14224] name failslab, interval 1, probability 0, space 0, times 0 [ 183.343504][T14224] CPU: 0 UID: 0 PID: 14224 Comm: syz.5.4270 Not tainted 6.12.0-syzkaller-09435-g2c22dc1ee3a1 #0 [ 183.353937][T14224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 183.364029][T14224] Call Trace: [ 183.367300][T14224] [ 183.370224][T14224] dump_stack_lvl+0xf2/0x150 [ 183.374898][T14224] dump_stack+0x15/0x20 [ 183.379140][T14224] should_fail_ex+0x223/0x230 [ 183.383848][T14224] should_failslab+0x8f/0xb0 [ 183.388496][T14224] __kmalloc_node_track_caller_noprof+0xa8/0x410 [ 183.394895][T14224] ? sel_commit_bools_write+0xcd/0x260 [ 183.400398][T14224] memdup_user_nul+0x2c/0xd0 [ 183.404991][T14224] sel_commit_bools_write+0xcd/0x260 [ 183.410414][T14224] vfs_writev+0x3fb/0x880 [ 183.414745][T14224] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 183.420647][T14224] ? mutex_lock+0xd/0x40 [ 183.424895][T14224] do_writev+0xf4/0x220 [ 183.429159][T14224] __x64_sys_writev+0x45/0x50 [ 183.433861][T14224] x64_sys_call+0x1fab/0x2dc0 [ 183.438602][T14224] do_syscall_64+0xc9/0x1c0 [ 183.443123][T14224] ? clear_bhb_loop+0x55/0xb0 [ 183.447845][T14224] ? clear_bhb_loop+0x55/0xb0 [ 183.449320][T14214] Alternate GPT is invalid, using primary GPT. [ 183.452521][T14224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.458897][T14214] loop1: p2 p3 p7 [ 183.464528][T14224] RIP: 0033:0x7fc449ebe919 [ 183.464547][T14224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.492291][T14224] RSP: 002b:00007fc448531038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 183.500699][T14224] RAX: ffffffffffffffda RBX: 00007fc44a075fa0 RCX: 00007fc449ebe919 [ 183.508685][T14224] RDX: 0000000000000001 RSI: 00000000200025c0 RDI: 0000000000000004 [ 183.516649][T14224] RBP: 00007fc448531090 R08: 0000000000000000 R09: 0000000000000000 [ 183.524651][T14224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 183.532647][T14224] R13: 0000000000000000 R14: 00007fc44a075fa0 R15: 00007ffe8f374498 [ 183.540618][T14224] [ 183.943656][T14238] loop5: detected capacity change from 0 to 1024 [ 183.950634][T14238] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 183.961871][T14238] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 183.969888][T14238] EXT4-fs (loop5): orphan cleanup on readonly fs [ 183.976482][T14238] EXT4-fs error (device loop5): ext4_free_blocks:6589: comm syz.5.4274: Freeing blocks not in datazone - block = 0, count = 4096 [ 183.989990][T14238] EXT4-fs (loop5): 1 orphan inode deleted [ 183.996167][T14238] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 184.011112][T14238] EXT4-fs error (device loop5): ext4_search_dir:1505: inode #2: block 16: comm syz.5.4274: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 184.084460][T14241] __nla_validate_parse: 3 callbacks suppressed [ 184.084472][T14241] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4274'. [ 184.804905][T14250] program syz.4.4278 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 184.850928][T10343] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.902427][T14256] tmpfs: Bad value for 'nr_inodes' [ 184.985919][T14263] syz.5.4284[14263] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 184.986071][T14263] syz.5.4284[14263] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 184.996714][T14258] loop4: detected capacity change from 0 to 2048 [ 184.997881][T14263] syz.5.4284[14263] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 185.120249][T14269] loop3: detected capacity change from 0 to 1024 [ 185.143987][T14258] Alternate GPT is invalid, using primary GPT. [ 185.150348][T14258] loop4: p2 p3 p7 [ 185.151449][T14267] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14267 comm=syz.5.4286 [ 185.154550][T14269] EXT4-fs: Ignoring removed orlov option [ 185.172311][T14269] EXT4-fs: Ignoring removed nomblk_io_submit option [ 185.225657][T14277] program syz.5.4289 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 185.235771][T14269] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.266966][T11519] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.298767][T14283] tmpfs: Bad value for 'nr_inodes' [ 185.336836][T14289] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4295'. [ 185.362035][T14292] loop3: detected capacity change from 0 to 1024 [ 185.371287][T14292] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 185.389151][T14292] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 185.399229][T14298] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4297'. [ 185.408339][T14292] EXT4-fs (loop3): orphan cleanup on readonly fs [ 185.419215][T14292] EXT4-fs error (device loop3): ext4_free_blocks:6589: comm syz.3.4291: Freeing blocks not in datazone - block = 0, count = 4096 [ 185.421353][T14299] loop1: detected capacity change from 0 to 1024 [ 185.435928][T14298] syzkaller1: entered promiscuous mode [ 185.440263][T14299] EXT4-fs: Ignoring removed orlov option [ 185.444340][T14298] syzkaller1: entered allmulticast mode [ 185.449991][T14299] EXT4-fs: Ignoring removed nomblk_io_submit option [ 185.462677][T14292] EXT4-fs (loop3): 1 orphan inode deleted [ 185.465204][T14299] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.468778][T14292] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 185.498941][T14292] EXT4-fs error (device loop3): ext4_search_dir:1505: inode #2: block 16: comm syz.3.4291: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 185.587808][T14312] program syz.5.4301 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 185.591147][T14304] loop1: detected capacity change from 0 to 2048 [ 185.619954][T14304] Alternate GPT is invalid, using primary GPT. [ 185.626370][T14304] loop1: p2 p3 p7 [ 185.639756][T14317] tmpfs: Bad value for 'nr_inodes' [ 185.680219][T14322] IPv4: Oversized IP packet from 127.202.26.0 [ 185.774768][T14328] loop5: detected capacity change from 0 to 128 [ 185.781235][T14328] EXT4-fs: Ignoring removed nobh option [ 185.781291][T14330] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4309'. [ 185.799690][T14328] ext4 filesystem being mounted at /310/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 185.815743][T14330] syzkaller1: entered promiscuous mode [ 185.821238][T14330] syzkaller1: entered allmulticast mode [ 185.840443][T14334] tipc: Enabling of bearer rejected, already enabled [ 185.922935][T14334] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4310'. [ 186.088264][T14346] loop1: detected capacity change from 0 to 2048 [ 186.134442][T14346] EXT4-fs (loop1): failed to initialize system zone (-117) [ 186.141868][T14346] EXT4-fs (loop1): mount failed [ 186.171885][T14350] loop1: detected capacity change from 0 to 128 [ 186.182054][T14350] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14350 comm=syz.1.4316 [ 186.195741][T14350] futex_wake_op: syz.1.4316 tries to shift op by -1; fix this program [ 186.331189][T14359] syz.4.4320[14359] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 186.331313][T14359] syz.4.4320[14359] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 186.346081][T14356] loop1: detected capacity change from 0 to 2048 [ 186.361882][T14359] syz.4.4320[14359] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 186.367236][T14361] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4321'. [ 186.390878][T14359] ip6erspan0: entered promiscuous mode [ 186.396368][T14359] ip6erspan0: entered allmulticast mode [ 186.402631][T14361] netlink: 'syz.3.4321': attribute type 10 has an invalid length. [ 186.422704][T14356] EXT4-fs (loop1): failed to initialize system zone (-117) [ 186.430030][T14356] EXT4-fs (loop1): mount failed [ 186.507268][ T29] kauditd_printk_skb: 1043 callbacks suppressed [ 186.507282][ T29] audit: type=1400 audit(1732650113.005:29773): avc: denied { setopt } for pid=14374 comm="syz.4.4324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 186.586194][ T29] audit: type=1400 audit(1732650113.085:29774): avc: denied { create } for pid=14374 comm="syz.4.4324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 186.610942][ T29] audit: type=1400 audit(1732650113.115:29775): avc: denied { write } for pid=14374 comm="syz.4.4324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 186.631616][ T29] audit: type=1400 audit(1732650113.115:29776): avc: denied { read } for pid=14374 comm="syz.4.4324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 186.658941][T14354] program syz.1.4318 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 186.668267][ T29] audit: type=1400 audit(1732650113.155:29777): avc: denied { read write } for pid=14353 comm="syz.1.4318" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 186.692792][ T29] audit: type=1400 audit(1732650113.155:29778): avc: denied { open } for pid=14353 comm="syz.1.4318" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 186.719878][ T29] audit: type=1400 audit(1732650113.225:29779): avc: denied { execmem } for pid=14353 comm="syz.1.4318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 186.767478][ T29] audit: type=1400 audit(1732650113.265:29780): avc: denied { read } for pid=14388 comm="syz.4.4326" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 186.790510][ T29] audit: type=1400 audit(1732650113.265:29781): avc: denied { open } for pid=14388 comm="syz.4.4326" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 186.826814][ T29] audit: type=1400 audit(1732650113.265:29782): avc: denied { ioctl } for pid=14388 comm="syz.4.4326" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 186.861571][T14393] loop0: detected capacity change from 0 to 128 [ 186.945087][T14396] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14396 comm=syz.0.4328 [ 186.958124][T14396] futex_wake_op: syz.0.4328 tries to shift op by -1; fix this program [ 187.009286][T14399] loop1: detected capacity change from 0 to 1024 [ 187.017042][T14399] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 187.041268][T14399] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 187.049573][T14399] EXT4-fs (loop1): orphan cleanup on readonly fs [ 187.056404][T14399] EXT4-fs error (device loop1): ext4_free_blocks:6589: comm syz.1.4329: Freeing blocks not in datazone - block = 0, count = 4096 [ 187.070302][T14399] EXT4-fs (loop1): 1 orphan inode deleted [ 187.086670][T14399] EXT4-fs error (device loop1): ext4_search_dir:1505: inode #2: block 16: comm syz.1.4329: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 187.478899][T14404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.487334][T14404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.706640][T14407] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4332'. [ 187.716228][T14407] netlink: 'syz.3.4332': attribute type 10 has an invalid length. [ 187.740105][T14410] hub 5-0:1.0: USB hub found [ 187.744789][T14410] hub 5-0:1.0: 8 ports detected [ 187.964580][T14419] loop0: detected capacity change from 0 to 128 [ 187.971434][T14419] EXT4-fs: Ignoring removed nobh option [ 187.989865][T14419] EXT4-fs mount: 5 callbacks suppressed [ 187.989879][T14419] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 188.008080][T10003] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.019425][T14419] ext4 filesystem being mounted at /299/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 188.062374][T10647] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 188.242580][T14432] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4341'. [ 188.253360][T14435] loop3: detected capacity change from 0 to 128 [ 188.265082][T14435] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14435 comm=syz.3.4342 [ 188.280236][T14435] futex_wake_op: syz.3.4342 tries to shift op by -1; fix this program [ 188.339375][T14438] loop0: detected capacity change from 0 to 128 [ 188.358249][T14438] EXT4-fs: Ignoring removed nobh option [ 188.407861][T14438] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 188.435099][T14438] ext4 filesystem being mounted at /302/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 188.449878][T14442] loop3: detected capacity change from 0 to 2048 [ 188.490483][T10647] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 188.502977][T14442] EXT4-fs (loop3): failed to initialize system zone (-117) [ 188.524904][T14442] EXT4-fs (loop3): mount failed [ 188.584840][T14448] loop0: detected capacity change from 0 to 128 [ 188.591568][T14448] EXT4-fs: Ignoring removed nobh option [ 188.602486][T14448] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 188.616359][T14448] ext4 filesystem being mounted at /304/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 188.662373][T10647] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 188.843271][T14457] loop0: detected capacity change from 0 to 1024 [ 188.900003][T14457] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 188.978636][T14463] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4350'. [ 188.988997][T14457] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 188.997191][T14457] EXT4-fs (loop0): orphan cleanup on readonly fs [ 189.006003][T14457] EXT4-fs error (device loop0): ext4_free_blocks:6589: comm syz.0.4348: Freeing blocks not in datazone - block = 0, count = 4096 [ 189.019797][T14457] EXT4-fs (loop0): 1 orphan inode deleted [ 189.022493][T14463] syzkaller1: entered promiscuous mode [ 189.025840][T14457] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 189.031053][T14463] syzkaller1: entered allmulticast mode [ 189.058755][T14457] EXT4-fs error (device loop0): ext4_search_dir:1505: inode #2: block 16: comm syz.0.4348: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 189.083651][T14462] loop3: detected capacity change from 0 to 2048 [ 189.139951][T14462] Alternate GPT is invalid, using primary GPT. [ 189.146356][T14462] loop3: p2 p3 p7 [ 189.197286][T14470] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4353'. [ 189.244314][T14474] loop4: detected capacity change from 0 to 128 [ 189.251239][T14474] EXT4-fs: Ignoring removed nobh option [ 189.260230][T14474] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 189.272990][T14474] ext4 filesystem being mounted at /276/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 189.277240][T14477] xt_hashlimit: size too large, truncated to 1048576 [ 189.299535][T10970] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 189.458945][T14482] loop4: detected capacity change from 0 to 2048 [ 189.487872][T14482] EXT4-fs (loop4): failed to initialize system zone (-117) [ 189.495928][T14482] EXT4-fs (loop4): mount failed [ 189.671182][T14482] program +}[@ is using a deprecated SCSI ioctl, please convert it to SG_IO [ 189.709938][T10647] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.869651][T14508] loop4: detected capacity change from 0 to 164 [ 189.930615][T14513] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4363'. [ 190.018312][T14500] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14500 comm=syz.0.4359 [ 190.027097][T14514] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14514 comm=syz.3.4362 [ 190.031212][T14513] syzkaller1: entered promiscuous mode [ 190.048817][T14513] syzkaller1: entered allmulticast mode [ 190.067730][T14516] loop5: detected capacity change from 0 to 2048 [ 190.180770][T14516] Alternate GPT is invalid, using primary GPT. [ 190.187191][T14516] loop5: p2 p3 p7 [ 190.260637][T14521] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4365'. [ 190.385714][T14535] loop3: detected capacity change from 0 to 1024 [ 190.400229][T14535] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 190.473107][T14535] JBD2: no valid journal superblock found [ 190.478919][T14535] EXT4-fs (loop3): Could not load journal inode [ 190.507647][T14535] Invalid ELF header magic: != ELF [ 190.523712][T14535] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4372'. [ 190.532615][T14535] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4372'. [ 190.567557][T14535] ipvlan8: entered allmulticast mode [ 190.689771][T14541] loop4: detected capacity change from 0 to 1024 [ 190.707514][T14541] EXT4-fs: Ignoring removed nomblk_io_submit option [ 190.715590][T14541] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 190.720075][T14543] loop3: detected capacity change from 0 to 2048 [ 190.749231][T14541] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.762981][T14543] loop3: p1 < > p4 < > [ 190.772155][T14543] FAULT_INJECTION: forcing a failure. [ 190.772155][T14543] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 190.785228][T14543] CPU: 1 UID: 0 PID: 14543 Comm: syz.3.4374 Not tainted 6.12.0-syzkaller-09435-g2c22dc1ee3a1 #0 [ 190.795644][T14543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 190.805683][T14543] Call Trace: [ 190.809020][T14543] [ 190.811937][T14543] dump_stack_lvl+0xf2/0x150 [ 190.816522][T14543] dump_stack+0x15/0x20 [ 190.820668][T14543] should_fail_ex+0x223/0x230 [ 190.825335][T14543] should_fail+0xb/0x10 [ 190.829542][T14543] should_fail_usercopy+0x1a/0x20 [ 190.834564][T14543] strncpy_from_user+0x25/0x210 [ 190.839422][T14543] ? kmem_cache_alloc_noprof+0x18e/0x320 [ 190.843654][T14528] loop0: detected capacity change from 0 to 256 [ 190.845037][T14543] ? getname_flags+0x81/0x3b0 [ 190.845066][T14543] getname_flags+0xb0/0x3b0 [ 190.845089][T14543] __x64_sys_rename+0x40/0x70 [ 190.852086][T14528] msdos: Unexpected value for 'dots' [ 190.855969][T14543] x64_sys_call+0x2b1c/0x2dc0 [ 190.855997][T14543] do_syscall_64+0xc9/0x1c0 [ 190.879718][T14543] ? clear_bhb_loop+0x55/0xb0 [ 190.884420][T14543] ? clear_bhb_loop+0x55/0xb0 [ 190.889108][T14543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.895102][T14543] RIP: 0033:0x7f17a8a5e919 [ 190.899582][T14543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.919366][T14543] RSP: 002b:00007f17a70d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 190.927875][T14543] RAX: ffffffffffffffda RBX: 00007f17a8c15fa0 RCX: 00007f17a8a5e919 [ 190.935829][T14543] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000300 [ 190.943793][T14543] RBP: 00007f17a70d7090 R08: 0000000000000000 R09: 0000000000000000 [ 190.951767][T14543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.959764][T14543] R13: 0000000000000000 R14: 00007f17a8c15fa0 R15: 00007fff3893b448 [ 190.967807][T14543] [ 190.972669][T10970] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.058806][T14557] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4377'. [ 191.071418][T14557] syzkaller1: entered promiscuous mode [ 191.076989][T14557] syzkaller1: entered allmulticast mode [ 191.105524][T14553] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14553 comm=syz.3.4376 [ 191.197316][T14556] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14556 comm=syz.4.4375 [ 191.281964][T14563] FAULT_INJECTION: forcing a failure. [ 191.281964][T14563] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 191.295077][T14563] CPU: 1 UID: 0 PID: 14563 Comm: syz.5.4379 Not tainted 6.12.0-syzkaller-09435-g2c22dc1ee3a1 #0 [ 191.305500][T14563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 191.315564][T14563] Call Trace: [ 191.318879][T14563] [ 191.321803][T14563] dump_stack_lvl+0xf2/0x150 [ 191.326458][T14563] dump_stack+0x15/0x20 [ 191.330651][T14563] should_fail_ex+0x223/0x230 [ 191.335341][T14563] should_fail+0xb/0x10 [ 191.339493][T14563] should_fail_usercopy+0x1a/0x20 [ 191.344542][T14563] _copy_from_user+0x1e/0xb0 [ 191.349131][T14563] do_ip6t_set_ctl+0x42c/0x8c0 [ 191.353891][T14563] ? kstrtouint+0x77/0xc0 [ 191.358258][T14563] nf_setsockopt+0x195/0x1b0 [ 191.362843][T14563] ipv6_setsockopt+0x10f/0x130 [ 191.367677][T14563] tcp_setsockopt+0x93/0xb0 [ 191.372175][T14563] sock_common_setsockopt+0x64/0x80 [ 191.377442][T14563] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 191.383330][T14563] __sys_setsockopt+0x187/0x200 [ 191.388177][T14563] __x64_sys_setsockopt+0x66/0x80 [ 191.393269][T14563] x64_sys_call+0x282e/0x2dc0 [ 191.397961][T14563] do_syscall_64+0xc9/0x1c0 [ 191.402464][T14563] ? clear_bhb_loop+0x55/0xb0 [ 191.407142][T14563] ? clear_bhb_loop+0x55/0xb0 [ 191.411882][T14563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.417771][T14563] RIP: 0033:0x7fc449ebe919 [ 191.422172][T14563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.441849][T14563] RSP: 002b:00007fc448531038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 191.450365][T14563] RAX: ffffffffffffffda RBX: 00007fc44a075fa0 RCX: 00007fc449ebe919 [ 191.458359][T14563] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000005 [ 191.466324][T14563] RBP: 00007fc448531090 R08: 00000000000004a0 R09: 0000000000000000 [ 191.474282][T14563] R10: 0000000020000a40 R11: 0000000000000246 R12: 0000000000000001 [ 191.482241][T14563] R13: 0000000000000000 R14: 00007fc44a075fa0 R15: 00007ffe8f374498 [ 191.490262][T14563] [ 191.501151][T14568] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4382'. [ 191.542277][T14575] loop1: detected capacity change from 0 to 1024 [ 191.568522][T14564] loop3: detected capacity change from 0 to 2048 [ 191.576191][T14575] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 191.586964][T14575] JBD2: no valid journal superblock found [ 191.592679][T14575] EXT4-fs (loop1): Could not load journal inode [ 191.603693][T14580] loop0: detected capacity change from 0 to 164 [ 191.623035][T14575] Invalid ELF header magic: != ELF [ 191.630412][T14575] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4384'. [ 191.638949][ T29] kauditd_printk_skb: 332 callbacks suppressed [ 191.638963][ T29] audit: type=1400 audit(1732650118.135:30115): avc: denied { write } for pid=14582 comm="syz.5.4387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 191.639368][T14575] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4384'. [ 191.677421][T14575] ipvlan12: entered allmulticast mode [ 191.689465][T14564] Alternate GPT is invalid, using primary GPT. [ 191.695860][T14564] loop3: p2 p3 p7 [ 191.759405][T14586] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14586 comm=syz.5.4388 [ 192.248468][T14600] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14600 comm=syz.5.4392 [ 192.329201][T14601] loop1: detected capacity change from 0 to 256 [ 192.336408][T14601] msdos: Unexpected value for 'dots' [ 192.498305][T14613] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4396'. [ 192.603216][T14610] syzkaller1: entered promiscuous mode [ 192.608767][T14610] syzkaller1: entered allmulticast mode [ 192.698236][T14624] loop0: detected capacity change from 0 to 1024 [ 192.706782][T14624] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 192.717352][T14624] JBD2: no valid journal superblock found [ 192.723234][T14624] EXT4-fs (loop0): Could not load journal inode [ 192.748246][T14622] loop4: detected capacity change from 0 to 2048 [ 192.754943][T14624] Invalid ELF header magic: != ELF [ 192.762882][T14624] ipvlan17: entered allmulticast mode [ 192.771916][T14626] loop3: detected capacity change from 0 to 2048 [ 192.789140][T14622] Alternate GPT is invalid, using primary GPT. [ 192.795556][T14622] loop4: p2 p3 p7 [ 192.805369][T14633] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14633 comm=syz.5.4403 [ 192.819957][T14626] EXT4-fs (loop3): failed to initialize system zone (-117) [ 192.833499][T14626] EXT4-fs (loop3): mount failed [ 192.840550][T14633] netlink: 'syz.5.4403': attribute type 1 has an invalid length. [ 192.856649][T14633] 8021q: adding VLAN 0 to HW filter on device bond2 [ 192.888221][T14626] program +}[@ is using a deprecated SCSI ioctl, please convert it to SG_IO [ 192.889014][T14633] bond2: (slave ip6gretap1): making interface the new active one [ 192.905736][T14633] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 193.071836][T14643] loop5: detected capacity change from 0 to 2048 [ 193.115463][ T29] audit: type=1326 audit(1732650119.595:30116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14646 comm="syz.1.4408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408e95e919 code=0x7ffc0000 [ 193.139162][ T29] audit: type=1326 audit(1732650119.595:30117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14646 comm="syz.1.4408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f408e95e919 code=0x7ffc0000 [ 193.162633][ T29] audit: type=1326 audit(1732650119.595:30118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14646 comm="syz.1.4408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408e95e919 code=0x7ffc0000 [ 193.186640][ T29] audit: type=1326 audit(1732650119.595:30119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14646 comm="syz.1.4408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f408e95e919 code=0x7ffc0000 [ 193.210342][ T29] audit: type=1326 audit(1732650119.595:30120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14646 comm="syz.1.4408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408e95e919 code=0x7ffc0000 [ 193.234483][ T29] audit: type=1326 audit(1732650119.595:30121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14646 comm="syz.1.4408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f408e95e919 code=0x7ffc0000 [ 193.258320][ T29] audit: type=1326 audit(1732650119.595:30122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14646 comm="syz.1.4408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408e95e919 code=0x7ffc0000 [ 193.276248][T14643] EXT4-fs (loop5): failed to initialize system zone (-117) [ 193.281973][ T29] audit: type=1326 audit(1732650119.595:30123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14646 comm="syz.1.4408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f408e95e919 code=0x7ffc0000 [ 193.290192][T14643] EXT4-fs (loop5): mount failed [ 193.312724][ T29] audit: type=1326 audit(1732650119.595:30124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14646 comm="syz.1.4408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408e95e919 code=0x7ffc0000 [ 193.384697][T14643] program +}[@ is using a deprecated SCSI ioctl, please convert it to SG_IO [ 193.665919][T14665] syzkaller1: entered promiscuous mode [ 193.671410][T14665] syzkaller1: entered allmulticast mode [ 193.671711][T14658] loop1: detected capacity change from 0 to 164 [ 193.856294][T14667] loop5: detected capacity change from 0 to 2048 [ 193.989440][T14667] EXT4-fs (loop5): failed to initialize system zone (-117) [ 193.996768][T14667] EXT4-fs (loop5): mount failed [ 194.012965][T14667] program +}[@ is using a deprecated SCSI ioctl, please convert it to SG_IO [ 194.038876][T14674] loop0: detected capacity change from 0 to 2048 [ 194.193100][T14674] Alternate GPT is invalid, using primary GPT. [ 194.199544][T14674] loop0: p2 p3 p7 [ 194.915516][T14721] loop4: detected capacity change from 0 to 164 [ 194.954740][T14713] loop0: detected capacity change from 0 to 2048 [ 194.993227][T14713] Alternate GPT is invalid, using primary GPT. [ 195.000230][T14713] loop0: p2 p3 p7 [ 195.094084][T14717] loop1: detected capacity change from 0 to 256 [ 195.101037][T14717] msdos: Unexpected value for 'dots' [ 195.498140][T14746] bond0: (slave dummy0): Releasing backup interface [ 195.519035][T14746] batman_adv: batadv0: Adding interface: dummy0 [ 195.525365][T14746] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.550592][T14746] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 195.581638][T14745] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14745 comm=syz.3.4438 [ 195.648296][T14746] loop5: detected capacity change from 0 to 1024 [ 195.704071][T14746] EXT4-fs: Ignoring removed orlov option [ 195.710327][T14746] EXT4-fs: Ignoring removed bh option [ 195.746782][T14753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.755518][T14755] __nla_validate_parse: 4 callbacks suppressed [ 195.755530][T14755] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4442'. [ 195.767626][T14753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.784816][T14746] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8842c018, mo2=0002] [ 195.802503][T14746] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.831316][T14767] tmpfs: Bad value for 'nr_inodes' [ 195.882581][T10343] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.911221][T14769] loop1: detected capacity change from 0 to 2048 [ 195.925689][T14769] EXT4-fs (loop1): failed to initialize system zone (-117) [ 195.932993][T14769] EXT4-fs (loop1): mount failed [ 195.939702][T14776] loop4: detected capacity change from 0 to 256 [ 195.967657][T14769] program +}[@ is using a deprecated SCSI ioctl, please convert it to SG_IO [ 196.012269][T14780] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4459'. [ 196.052403][T14780] netlink: 'syz.1.4459': attribute type 10 has an invalid length. [ 196.399937][T14781] loop5: detected capacity change from 0 to 256 [ 196.414449][T14781] msdos: Unexpected value for 'dots' [ 196.709026][T14807] loop4: detected capacity change from 0 to 164 [ 196.731851][T14810] tmpfs: Bad value for 'nr_inodes' [ 196.749117][T14811] loop3: detected capacity change from 0 to 256 [ 196.772448][T14811] msdos: Unexpected value for 'dots' [ 196.935344][T14818] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4461'. [ 196.955404][T14818] netlink: 'syz.5.4461': attribute type 10 has an invalid length. [ 196.969819][T14818] batman_adv: batadv0: Removing interface: dummy0 [ 196.987878][T14818] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 197.006666][T14820] loop1: detected capacity change from 0 to 128 [ 197.026363][T14820] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14820 comm=syz.1.4462 [ 197.059606][T14820] futex_wake_op: syz.1.4462 tries to shift op by -1; fix this program [ 197.153022][ T29] kauditd_printk_skb: 186 callbacks suppressed [ 197.153035][ T29] audit: type=1326 audit(1732650123.645:30311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14825 comm="syz.0.4465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3839b8e919 code=0x7ffc0000 [ 197.195867][ T29] audit: type=1326 audit(1732650123.685:30312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14825 comm="syz.0.4465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3839b8e919 code=0x7ffc0000 [ 197.219498][ T29] audit: type=1326 audit(1732650123.685:30313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14825 comm="syz.0.4465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3839b8e919 code=0x7ffc0000 [ 197.243271][ T29] audit: type=1326 audit(1732650123.685:30314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14825 comm="syz.0.4465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3839b8e919 code=0x7ffc0000 [ 197.267012][ T29] audit: type=1326 audit(1732650123.685:30315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14825 comm="syz.0.4465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f3839b8e919 code=0x7ffc0000 [ 197.290640][ T29] audit: type=1326 audit(1732650123.685:30316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14825 comm="syz.0.4465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3839b8e919 code=0x7ffc0000 [ 197.291927][T14822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.314272][ T29] audit: type=1326 audit(1732650123.685:30317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14825 comm="syz.0.4465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f3839b8e919 code=0x7ffc0000 [ 197.346106][ T29] audit: type=1326 audit(1732650123.685:30318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14825 comm="syz.0.4465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3839b8e919 code=0x7ffc0000 [ 197.369873][ T29] audit: type=1326 audit(1732650123.685:30319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14825 comm="syz.0.4465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3839b8e919 code=0x7ffc0000 [ 197.393351][ T29] audit: type=1326 audit(1732650123.685:30320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14825 comm="syz.0.4465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3839b8e919 code=0x7ffc0000 [ 197.403929][T14822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.516110][T14830] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4466'. [ 197.539612][T14834] tipc: Enabling of bearer rejected, already enabled [ 197.566995][T14836] tmpfs: Bad value for 'nr_inodes' [ 197.680321][T14839] 9pnet_fd: Insufficient options for proto=fd [ 197.692958][T14834] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4468'. [ 197.694964][T14830] syzkaller1: entered promiscuous mode [ 197.707508][T14830] syzkaller1: entered allmulticast mode [ 197.882403][T14841] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4471'. [ 197.945954][T14841] syzkaller1: entered promiscuous mode [ 197.951474][T14841] syzkaller1: entered allmulticast mode [ 198.017189][T14846] loop1: detected capacity change from 0 to 2048 [ 198.044573][T14846] EXT4-fs (loop1): failed to initialize system zone (-117) [ 198.056632][T14846] EXT4-fs (loop1): mount failed [ 198.148831][T14846] program +}[@ is using a deprecated SCSI ioctl, please convert it to SG_IO [ 198.185723][T14863] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 198.196941][T14857] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14857 comm=syz.5.4476 [ 198.329872][T14861] loop4: detected capacity change from 0 to 256 [ 198.336544][T14861] msdos: Unexpected value for 'dots' [ 198.434081][T14884] 9pnet_fd: Insufficient options for proto=fd [ 198.695338][T14892] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4489'. [ 198.733303][T14886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.741800][T14886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.841768][T14896] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14896 comm=syz.1.4491 [ 198.911935][T14899] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 199.013029][T14905] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14905 comm=syz.1.4493 [ 199.132181][T14916] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4497'. [ 199.204275][T14922] tmpfs: Bad value for 'nr_inodes' [ 199.246152][T14923] 9pnet_fd: Insufficient options for proto=fd [ 199.444300][T14930] FAULT_INJECTION: forcing a failure. [ 199.444300][T14930] name failslab, interval 1, probability 0, space 0, times 0 [ 199.457054][T14930] CPU: 0 UID: 0 PID: 14930 Comm: syz.0.4502 Not tainted 6.12.0-syzkaller-09435-g2c22dc1ee3a1 #0 [ 199.467536][T14930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 199.477610][T14930] Call Trace: [ 199.480955][T14930] [ 199.483918][T14930] dump_stack_lvl+0xf2/0x150 [ 199.488567][T14930] dump_stack+0x15/0x20 [ 199.492791][T14930] should_fail_ex+0x223/0x230 [ 199.497471][T14930] ? md_alloc+0x99/0x9c0 [ 199.501744][T14930] should_failslab+0x8f/0xb0 [ 199.506357][T14930] __kmalloc_cache_noprof+0x4e/0x320 [ 199.511637][T14930] md_alloc+0x99/0x9c0 [ 199.515758][T14930] ? __pfx_resume_store+0x10/0x10 [ 199.520774][T14930] md_alloc_and_put+0x18/0x150 [ 199.525621][T14930] md_probe+0x79/0x90 [ 199.529589][T14930] ? __pfx_md_probe+0x10/0x10 [ 199.534262][T14930] blk_request_module+0x120/0x140 [ 199.539368][T14930] blkdev_get_no_open+0x43/0xe0 [ 199.544219][T14930] bdev_file_open_by_dev+0x99/0x220 [ 199.549418][T14930] ? __pfx_resume_store+0x10/0x10 [ 199.554566][T14930] swsusp_check+0x3f/0x240 [ 199.559000][T14930] software_resume+0x43/0x2e0 [ 199.563669][T14930] resume_store+0x34e/0x3a0 [ 199.568247][T14930] kobj_attr_store+0x47/0x70 [ 199.572836][T14930] ? __pfx_kobj_attr_store+0x10/0x10 [ 199.578229][T14930] sysfs_kf_write+0xae/0xd0 [ 199.582726][T14930] ? __pfx_sysfs_kf_write+0x10/0x10 [ 199.587991][T14930] kernfs_fop_write_iter+0x1c8/0x2c0 [ 199.593295][T14930] vfs_write+0x77f/0x920 [ 199.597566][T14930] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 199.603396][T14930] ksys_write+0xe8/0x1b0 [ 199.607637][T14930] __x64_sys_write+0x42/0x50 [ 199.612260][T14930] x64_sys_call+0x287e/0x2dc0 [ 199.616936][T14930] do_syscall_64+0xc9/0x1c0 [ 199.621437][T14930] ? clear_bhb_loop+0x55/0xb0 [ 199.626182][T14930] ? clear_bhb_loop+0x55/0xb0 [ 199.630864][T14930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.636992][T14930] RIP: 0033:0x7f3839b8e919 [ 199.641404][T14930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.661157][T14930] RSP: 002b:00007f38381e0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 199.669567][T14930] RAX: ffffffffffffffda RBX: 00007f3839d46080 RCX: 00007f3839b8e919 [ 199.677620][T14930] RDX: 0000000000000012 RSI: 0000000020000000 RDI: 0000000000000003 [ 199.685585][T14930] RBP: 00007f38381e0090 R08: 0000000000000000 R09: 0000000000000000 [ 199.693616][T14930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.701605][T14930] R13: 0000000000000000 R14: 00007f3839d46080 R15: 00007fffdb4d8808 [ 199.709601][T14930] [ 199.717857][T14929] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14929 comm=syz.1.4503 [ 199.731766][T14933] loop4: detected capacity change from 0 to 2048 [ 199.745477][T14933] EXT4-fs (loop4): failed to initialize system zone (-117) [ 199.752872][T14933] EXT4-fs (loop4): mount failed [ 199.767514][T14933] program +}[@ is using a deprecated SCSI ioctl, please convert it to SG_IO [ 199.793763][T14937] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4505'. [ 199.817913][T14937] syzkaller1: entered promiscuous mode [ 199.823456][T14937] syzkaller1: entered allmulticast mode [ 199.872104][T14939] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14939 comm=syz.4.4506 [ 199.950011][T14943] loop5: detected capacity change from 0 to 512 [ 199.975088][T14943] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.988112][T14943] ext4 filesystem being mounted at /345/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.024577][T10343] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.050382][T14957] tmpfs: Bad value for 'nr_inodes' [ 200.075205][T14963] loop5: detected capacity change from 0 to 1024 [ 200.082243][T14963] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 200.092713][T14963] JBD2: no valid journal superblock found [ 200.098569][T14963] EXT4-fs (loop5): Could not load journal inode [ 200.108358][T14963] Invalid ELF header magic: != ELF [ 200.114580][T14963] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4515'. [ 200.125497][T14963] ipvlan7: entered allmulticast mode [ 200.234076][T14966] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14966 comm=syz.5.4516 [ 200.245657][T14968] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14968 comm=syz.0.4517 [ 200.259560][T14959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.308379][T14959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.332414][T14972] syzkaller1: entered promiscuous mode [ 200.337918][T14972] syzkaller1: entered allmulticast mode [ 200.554563][T14988] tmpfs: Bad value for 'nr_inodes' [ 200.592520][T14992] loop0: detected capacity change from 0 to 164 [ 200.600546][T14994] loop3: detected capacity change from 0 to 2048 [ 200.688632][T14994] EXT4-fs (loop3): failed to initialize system zone (-117) [ 200.696131][T14994] EXT4-fs (loop3): mount failed [ 200.699976][T14996] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14996 comm=syz.5.4528 [ 200.769598][T15001] __nla_validate_parse: 2 callbacks suppressed [ 200.769611][T15001] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4529'. [ 200.860068][T15006] syzkaller1: entered promiscuous mode [ 200.865754][T15006] syzkaller1: entered allmulticast mode [ 200.919328][T15012] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4534'. [ 200.975787][T15015] loop4: detected capacity change from 0 to 164 [ 201.000840][T15017] loop5: detected capacity change from 0 to 736 [ 201.021495][T15020] loop3: detected capacity change from 0 to 1024 [ 201.042660][T15020] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 201.068946][T15017] Symlink component flag not implemented [ 201.078250][T15020] JBD2: no valid journal superblock found [ 201.084014][T15020] EXT4-fs (loop3): Could not load journal inode [ 201.094077][T15017] Symlink component flag not implemented (122) [ 201.108201][T15020] Invalid ELF header magic: != ELF [ 201.119356][T15020] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4537'. [ 201.128328][T15020] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4537'. [ 201.150655][T15020] ipvlan9: entered allmulticast mode [ 201.195611][T15023] tmpfs: Bad value for 'nr_inodes' [ 201.327848][T15026] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15026 comm=syz.3.4539 [ 201.430656][T15036] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4544'. [ 201.571335][T15041] loop3: detected capacity change from 0 to 2048 [ 201.584870][T15041] EXT4-fs (loop3): failed to initialize system zone (-117) [ 201.592174][T15041] EXT4-fs (loop3): mount failed [ 201.601470][T15041] program +}[@ is using a deprecated SCSI ioctl, please convert it to SG_IO [ 201.610770][T15030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.619267][T15030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.648462][T15045] syzkaller1: entered promiscuous mode [ 201.653976][T15045] syzkaller1: entered allmulticast mode [ 201.739950][T15047] loop3: detected capacity change from 0 to 1024 [ 201.746528][T15049] tmpfs: Bad value for 'nr_inodes' [ 201.746984][T15047] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 201.762629][T15047] JBD2: no valid journal superblock found [ 201.768476][T15047] EXT4-fs (loop3): Could not load journal inode [ 201.778437][T15047] Invalid ELF header magic: != ELF [ 201.784324][T15047] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4548'. [ 201.793184][T15047] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4548'. [ 201.806380][T15047] ipvlan10: entered allmulticast mode [ 201.828931][T15055] tipc: Enabling of bearer rejected, already enabled [ 201.940774][T15061] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4552'. [ 202.002452][T15063] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4555'. [ 202.153226][T15069] syzkaller1: entered promiscuous mode [ 202.158780][T15069] syzkaller1: entered allmulticast mode [ 202.202204][T15076] FAULT_INJECTION: forcing a failure. [ 202.202204][T15076] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 202.215373][T15076] CPU: 0 UID: 0 PID: 15076 Comm: syz.3.4560 Not tainted 6.12.0-syzkaller-09435-g2c22dc1ee3a1 #0 [ 202.225801][T15076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 202.235836][T15076] Call Trace: [ 202.239097][T15076] [ 202.242035][T15076] dump_stack_lvl+0xf2/0x150 [ 202.246623][T15076] dump_stack+0x15/0x20 [ 202.250839][T15076] should_fail_ex+0x223/0x230 [ 202.255556][T15076] should_fail+0xb/0x10 [ 202.259795][T15076] should_fail_usercopy+0x1a/0x20 [ 202.265061][T15076] strncpy_from_user+0x25/0x210 [ 202.269920][T15076] ? kmem_cache_alloc_noprof+0x18e/0x320 [ 202.275653][T15076] ? getname_flags+0x81/0x3b0 [ 202.280343][T15076] getname_flags+0xb0/0x3b0 [ 202.284903][T15076] user_path_create+0x26/0x120 [ 202.289749][T15076] bpf_obj_pin_user+0xc9/0x260 [ 202.294547][T15076] bpf_obj_pin+0xd8/0xf0 [ 202.298850][T15076] __sys_bpf+0x5ad/0x7a0 [ 202.303171][T15076] __x64_sys_bpf+0x43/0x50 [ 202.307630][T15076] x64_sys_call+0x2914/0x2dc0 [ 202.312361][T15076] do_syscall_64+0xc9/0x1c0 [ 202.316931][T15076] ? clear_bhb_loop+0x55/0xb0 [ 202.321687][T15076] ? clear_bhb_loop+0x55/0xb0 [ 202.326368][T15076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.332269][T15076] RIP: 0033:0x7f17a8a5e919 [ 202.336733][T15076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.356404][T15076] RSP: 002b:00007f17a70d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 202.364895][T15076] RAX: ffffffffffffffda RBX: 00007f17a8c15fa0 RCX: 00007f17a8a5e919 [ 202.372944][T15076] RDX: 0000000000000018 RSI: 00000000200000c0 RDI: 0000000000000006 [ 202.380914][T15076] RBP: 00007f17a70d7090 R08: 0000000000000000 R09: 0000000000000000 [ 202.388886][T15076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.396882][T15076] R13: 0000000000000000 R14: 00007f17a8c15fa0 R15: 00007fff3893b448 [ 202.404917][T15076] [ 202.532452][ T29] kauditd_printk_skb: 434 callbacks suppressed [ 202.532499][ T29] audit: type=1400 audit(1732650129.025:30755): avc: denied { name_connect } for pid=15085 comm="syz.0.4564" dest=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 202.609544][ T29] audit: type=1400 audit(1732650129.085:30756): avc: denied { setopt } for pid=15085 comm="syz.0.4564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 202.625735][T15084] loop3: detected capacity change from 0 to 2048 [ 202.680066][T15084] Alternate GPT is invalid, using primary GPT. [ 202.686511][T15084] loop3: p2 p3 p7 [ 202.720860][T15095] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4566'. [ 202.780897][T15093] selinux_netlink_send: 1 callbacks suppressed [ 202.780917][T15093] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15093 comm=syz.0.4565 [ 202.817770][ T29] audit: type=1326 audit(1732650129.315:30757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15097 comm="syz.3.4567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a8a5e919 code=0x7ffc0000 [ 202.841578][ T29] audit: type=1326 audit(1732650129.315:30758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15097 comm="syz.3.4567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a8a5e919 code=0x7ffc0000 [ 202.869849][ T29] audit: type=1326 audit(1732650129.335:30759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15097 comm="syz.3.4567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f17a8a5e919 code=0x7ffc0000 [ 202.893561][ T29] audit: type=1326 audit(1732650129.335:30760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15097 comm="syz.3.4567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a8a5e919 code=0x7ffc0000 [ 202.917126][ T29] audit: type=1326 audit(1732650129.335:30761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15097 comm="syz.3.4567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a8a5e919 code=0x7ffc0000 [ 202.940855][ T29] audit: type=1326 audit(1732650129.335:30762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15097 comm="syz.3.4567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f17a8a5e919 code=0x7ffc0000 [ 202.964495][ T29] audit: type=1326 audit(1732650129.335:30763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15097 comm="syz.3.4567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a8a5e919 code=0x7ffc0000 [ 202.988071][ T29] audit: type=1326 audit(1732650129.335:30764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15097 comm="syz.3.4567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7f17a8a5e919 code=0x7ffc0000 [ 203.083390][T15107] loop5: detected capacity change from 0 to 512 [ 203.101542][T15100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.110621][T15100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.132011][T15107] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.145542][T15107] ext4 filesystem being mounted at /360/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 203.164670][T10343] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.237937][T15119] bond1: entered promiscuous mode [ 203.242995][T15119] bond1: entered allmulticast mode [ 203.249122][T15119] 8021q: adding VLAN 0 to HW filter on device bond1 [ 203.263695][T15119] bond1 (unregistering): Released all slaves [ 203.308596][T15125] loop1: detected capacity change from 0 to 256 [ 203.381084][T15114] loop5: detected capacity change from 0 to 256 [ 203.387835][T15114] msdos: Unexpected value for 'dots' [ 203.415040][T15128] loop3: detected capacity change from 0 to 512 [ 203.424842][T15128] EXT4-fs warning (device loop3): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 203.439985][T15128] EXT4-fs (loop3): mount failed [ 204.144015][T15147] loop5: detected capacity change from 0 to 512 [ 204.150318][T15139] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15139 comm=syz.1.4579 [ 204.165422][T15147] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.179372][T15147] ext4 filesystem being mounted at /362/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 204.272858][T10343] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.289169][T15159] FAULT_INJECTION: forcing a failure. [ 204.289169][T15159] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 204.302340][T15159] CPU: 0 UID: 0 PID: 15159 Comm: syz.1.4584 Not tainted 6.12.0-syzkaller-09435-g2c22dc1ee3a1 #0 [ 204.312757][T15159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 204.322798][T15159] Call Trace: [ 204.326152][T15159] [ 204.329074][T15159] dump_stack_lvl+0xf2/0x150 [ 204.333677][T15159] dump_stack+0x15/0x20 [ 204.337838][T15159] should_fail_ex+0x223/0x230 [ 204.342631][T15159] should_fail+0xb/0x10 [ 204.346773][T15159] should_fail_usercopy+0x1a/0x20 [ 204.351870][T15159] _copy_from_user+0x1e/0xb0 [ 204.356527][T15159] do_ip6t_set_ctl+0x42c/0x8c0 [ 204.361280][T15159] ? kstrtouint+0x77/0xc0 [ 204.365669][T15159] nf_setsockopt+0x195/0x1b0 [ 204.370334][T15159] ipv6_setsockopt+0x10f/0x130 [ 204.375089][T15159] tcp_setsockopt+0x93/0xb0 [ 204.379614][T15159] sock_common_setsockopt+0x64/0x80 [ 204.384813][T15159] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 204.390839][T15159] __sys_setsockopt+0x187/0x200 [ 204.395674][T15159] __x64_sys_setsockopt+0x66/0x80 [ 204.400710][T15159] x64_sys_call+0x282e/0x2dc0 [ 204.405389][T15159] do_syscall_64+0xc9/0x1c0 [ 204.409891][T15159] ? clear_bhb_loop+0x55/0xb0 [ 204.414590][T15159] ? clear_bhb_loop+0x55/0xb0 [ 204.419328][T15159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.425217][T15159] RIP: 0033:0x7f408e95e919 [ 204.429682][T15159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.449284][T15159] RSP: 002b:00007f408cfd7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 204.457820][T15159] RAX: ffffffffffffffda RBX: 00007f408eb15fa0 RCX: 00007f408e95e919 [ 204.465803][T15159] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000006 [ 204.473777][T15159] RBP: 00007f408cfd7090 R08: 00000000000004a0 R09: 0000000000000000 [ 204.481830][T15159] R10: 0000000020000a40 R11: 0000000000000246 R12: 0000000000000001 [ 204.489863][T15159] R13: 0000000000000000 R14: 00007f408eb15fa0 R15: 00007fff5dd54588 [ 204.497822][T15159] [ 204.769307][T15170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.778319][T15170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.872514][T15185] syz.5.4594[15185] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 204.873162][T15185] syz.5.4594[15185] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 204.885167][T15185] syz.5.4594[15185] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 204.959511][T15183] bond1: entered promiscuous mode [ 204.976066][T15183] bond1: entered allmulticast mode [ 204.982611][T15183] 8021q: adding VLAN 0 to HW filter on device bond1 [ 205.010293][T15183] bond1 (unregistering): Released all slaves [ 205.015226][T15188] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15188 comm=syz.5.4595 [ 205.037835][T15193] loop3: detected capacity change from 0 to 764 [ 205.044963][T15193] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 205.122227][T15202] loop4: detected capacity change from 0 to 128 [ 205.131225][T15196] hub 6-0:1.0: USB hub found [ 205.136744][T15196] hub 6-0:1.0: 8 ports detected [ 205.141716][T15202] FAT-fs (loop4): bread failed, FSINFO block (sector = 202) [ 205.163466][T15202] loop4: detected capacity change from 0 to 256 [ 205.261183][T15217] loop0: detected capacity change from 0 to 2048 [ 205.274670][T15202] FAT-fs (loop4): Directory bread(block 64) failed [ 205.281246][T15202] FAT-fs (loop4): Directory bread(block 65) failed [ 205.289653][T15202] FAT-fs (loop4): Directory bread(block 66) failed [ 205.297948][T15217] EXT4-fs (loop0): failed to initialize system zone (-117) [ 205.301093][T15202] FAT-fs (loop4): Directory bread(block 67) failed [ 205.307281][T15222] tmpfs: Bad value for 'nr_inodes' [ 205.311860][T15202] FAT-fs (loop4): Directory bread(block 68) failed [ 205.323512][T15217] EXT4-fs (loop0): mount failed [ 205.331618][T15202] FAT-fs (loop4): Directory bread(block 69) failed [ 205.338344][T15202] FAT-fs (loop4): Directory bread(block 70) failed [ 205.345152][T15202] FAT-fs (loop4): Directory bread(block 71) failed [ 205.352051][T15202] FAT-fs (loop4): Directory bread(block 72) failed [ 205.364718][T15202] FAT-fs (loop4): Directory bread(block 73) failed [ 205.390178][T15202] syz.4.4602: attempt to access beyond end of device [ 205.390178][T15202] loop4: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 205.430663][T15202] syz.4.4602: attempt to access beyond end of device [ 205.430663][T15202] loop4: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 205.449000][T15217] program +}[@ is using a deprecated SCSI ioctl, please convert it to SG_IO [ 205.482887][T15226] loop1: detected capacity change from 0 to 2048 [ 205.532657][T15226] EXT4-fs (loop1): failed to initialize system zone (-117) [ 205.542169][T15226] EXT4-fs (loop1): mount failed [ 205.547127][T15233] can: request_module (can-proto-3) failed. [ 205.547413][T15228] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15228 comm=syz.3.4611 [ 205.558408][T15237] netlink: 'syz.0.4613': attribute type 10 has an invalid length. [ 205.606695][T15239] loop0: detected capacity change from 0 to 164 [ 205.613505][T15224] program syz.1.4610 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 205.632501][T15241] pim6reg: entered allmulticast mode [ 205.646098][T15239] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 205.656256][T15239] IPv6: NLM_F_CREATE should be specified when creating new route [ 205.747259][T15256] loop3: detected capacity change from 0 to 512 [ 205.781161][T15256] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.790499][T15251] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15251 comm=syz.0.4619 [ 205.794829][T15256] ext4 filesystem being mounted at /273/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 205.836521][T11519] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.951390][T15266] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15266 comm=syz.0.4625 [ 205.960231][T15257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.973247][T15257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.008494][T15270] tmpfs: Bad value for 'nr_inodes' [ 206.036769][T15276] tmpfs: Bad value for 'nr_inodes' [ 206.043231][T15274] loop4: detected capacity change from 0 to 736 [ 206.079976][T15274] Symlink component flag not implemented [ 206.091623][T15278] loop3: detected capacity change from 0 to 764 [ 206.098722][T15274] Symlink component flag not implemented (122) [ 206.169868][T15292] loop3: detected capacity change from 0 to 512 [ 206.211053][T15294] tmpfs: Bad value for 'nr_inodes' [ 206.225697][T15296] FAULT_INJECTION: forcing a failure. [ 206.225697][T15296] name failslab, interval 1, probability 0, space 0, times 0 [ 206.238438][T15296] CPU: 1 UID: 0 PID: 15296 Comm: syz.5.4637 Not tainted 6.12.0-syzkaller-09435-g2c22dc1ee3a1 #0 [ 206.249002][T15296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 206.251624][T15291] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15291 comm=syz.0.4635 [ 206.259125][T15296] Call Trace: [ 206.259135][T15296] [ 206.259142][T15296] dump_stack_lvl+0xf2/0x150 [ 206.259176][T15296] dump_stack+0x15/0x20 [ 206.278024][T15292] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.282387][T15296] should_fail_ex+0x223/0x230 [ 206.287533][T15292] ext4 filesystem being mounted at /276/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 206.298904][T15296] ? __hw_addr_add_ex+0x13d/0x360 [ 206.298936][T15296] should_failslab+0x8f/0xb0 [ 206.323783][T15296] __kmalloc_cache_noprof+0x4e/0x320 [ 206.329177][T15296] __hw_addr_add_ex+0x13d/0x360 [ 206.334042][T15296] dev_addr_init+0xb2/0x120 [ 206.338561][T15296] alloc_netdev_mqs+0x1e1/0x9c0 [ 206.343495][T15296] ? __pfx_reg_vif_setup+0x10/0x10 [ 206.348611][T15296] mif6_add+0x2e4/0x750 [ 206.352798][T15296] ? _copy_from_user+0x8d/0xb0 [ 206.357572][T15296] ip6_mroute_setsockopt+0x9f1/0xa40 [ 206.362921][T15296] do_ipv6_setsockopt+0x34c/0x2250 [ 206.368040][T15296] ? __rcu_read_unlock+0x4e/0x70 [ 206.372974][T15296] ? avc_has_perm_noaudit+0x1cc/0x210 [ 206.378342][T15296] ? selinux_netlbl_socket_setsockopt+0xe5/0x2d0 [ 206.384690][T15296] ipv6_setsockopt+0x57/0x130 [ 206.389420][T15296] rawv6_setsockopt+0x21e/0x410 [ 206.394394][T15296] sock_common_setsockopt+0x64/0x80 [ 206.399593][T15296] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 206.405522][T15296] __sys_setsockopt+0x187/0x200 [ 206.410532][T15296] __x64_sys_setsockopt+0x66/0x80 [ 206.415548][T15296] x64_sys_call+0x282e/0x2dc0 [ 206.420282][T15296] do_syscall_64+0xc9/0x1c0 [ 206.424830][T15296] ? clear_bhb_loop+0x55/0xb0 [ 206.429509][T15296] ? clear_bhb_loop+0x55/0xb0 [ 206.434184][T15296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.440130][T15296] RIP: 0033:0x7fc449ebe919 [ 206.444549][T15296] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.464275][T15296] RSP: 002b:00007fc448531038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 206.472681][T15296] RAX: ffffffffffffffda RBX: 00007fc44a075fa0 RCX: 00007fc449ebe919 [ 206.480694][T15296] RDX: 00000000000000ca RSI: 0000000000000029 RDI: 0000000000000003 [ 206.488691][T15296] RBP: 00007fc448531090 R08: 000000000000000c R09: 0000000000000000 [ 206.496685][T15296] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.504653][T15296] R13: 0000000000000000 R14: 00007fc44a075fa0 R15: 00007ffe8f374498 [ 206.512646][T15296] [ 206.550307][T11519] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.573538][T15306] __nla_validate_parse: 1 callbacks suppressed [ 206.573552][T15306] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4640'. [ 206.711179][T15316] netlink: 'syz.0.4645': attribute type 3 has an invalid length. [ 206.713973][T15308] loop3: detected capacity change from 0 to 2048 [ 206.730805][T15318] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4645'. [ 206.754756][T15308] EXT4-fs (loop3): failed to initialize system zone (-117) [ 206.762298][T15308] EXT4-fs (loop3): mount failed [ 206.784359][T15308] program syz.3.4641 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 206.884454][T15337] loop5: detected capacity change from 0 to 512 [ 206.916666][T15337] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.018068][T15349] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4656'. [ 207.038168][T15337] ext4 filesystem being mounted at /379/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 207.050727][T15341] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15341 comm=syz.3.4653 [ 207.092379][T10343] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.119759][T15356] loop1: detected capacity change from 0 to 128 [ 207.274558][T15379] loop4: detected capacity change from 0 to 512 [ 207.281873][T15381] loop5: detected capacity change from 0 to 164 [ 207.290232][T15381] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 207.301567][T15381] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 207.301749][T15379] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.310271][T15381] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 207.335031][T15381] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 207.345429][T15379] ext4 filesystem being mounted at /322/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 207.372485][T10970] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.408885][T15383] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15383 comm=syz.1.4670 [ 207.441780][T15391] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4672'. [ 207.484906][T15395] FAULT_INJECTION: forcing a failure. [ 207.484906][T15395] name failslab, interval 1, probability 0, space 0, times 0 [ 207.497670][T15395] CPU: 0 UID: 0 PID: 15395 Comm: syz.4.4673 Not tainted 6.12.0-syzkaller-09435-g2c22dc1ee3a1 #0 [ 207.508521][T15395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 207.518609][T15395] Call Trace: [ 207.521876][T15395] [ 207.524797][T15395] dump_stack_lvl+0xf2/0x150 [ 207.529392][T15395] dump_stack+0x15/0x20 [ 207.533594][T15395] should_fail_ex+0x223/0x230 [ 207.538363][T15395] should_failslab+0x8f/0xb0 [ 207.543018][T15395] kmem_cache_alloc_noprof+0x52/0x320 [ 207.548418][T15395] ? sctp_get_port_local+0x410/0xa90 [ 207.553718][T15395] sctp_get_port_local+0x410/0xa90 [ 207.558841][T15395] sctp_do_bind+0x3a1/0x4c0 [ 207.563346][T15395] sctp_connect_new_asoc+0x15b/0x3b0 [ 207.568629][T15395] sctp_sendmsg+0xf05/0x1920 [ 207.573242][T15395] ? __pfx_sctp_sendmsg+0x10/0x10 [ 207.578262][T15395] inet_sendmsg+0xc5/0xd0 [ 207.582600][T15395] __sock_sendmsg+0x102/0x180 [ 207.587302][T15395] __sys_sendto+0x1a8/0x230 [ 207.591817][T15395] __x64_sys_sendto+0x78/0x90 [ 207.596626][T15395] x64_sys_call+0x29fa/0x2dc0 [ 207.601357][T15395] do_syscall_64+0xc9/0x1c0 [ 207.605995][T15395] ? clear_bhb_loop+0x55/0xb0 [ 207.610676][T15395] ? clear_bhb_loop+0x55/0xb0 [ 207.615492][T15395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.621516][T15395] RIP: 0033:0x7f679c82e919 [ 207.625926][T15395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.645533][T15395] RSP: 002b:00007f679aea1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 207.654051][T15395] RAX: ffffffffffffffda RBX: 00007f679c9e5fa0 RCX: 00007f679c82e919 [ 207.662157][T15395] RDX: 000000000000ffe0 RSI: 0000000020000580 RDI: 0000000000000003 [ 207.670133][T15395] RBP: 00007f679aea1090 R08: 0000000020000100 R09: 000000000000001c [ 207.678101][T15395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.686070][T15395] R13: 0000000000000000 R14: 00007f679c9e5fa0 R15: 00007fffdbf50408 [ 207.694098][T15395] [ 207.848629][T15400] loop1: detected capacity change from 0 to 2048 [ 207.877891][ T29] kauditd_printk_skb: 337 callbacks suppressed [ 207.877966][ T29] audit: type=1326 audit(1732650134.375:31101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15412 comm="syz.0.4680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3839b8e919 code=0x7ffc0000 [ 207.907812][ T29] audit: type=1326 audit(1732650134.375:31102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15412 comm="syz.0.4680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3839b8e919 code=0x7ffc0000 [ 207.931996][ T29] audit: type=1326 audit(1732650134.375:31103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15412 comm="syz.0.4680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f3839b8e919 code=0x7ffc0000 [ 207.945311][T15421] loop4: detected capacity change from 0 to 512 [ 207.955748][ T29] audit: type=1326 audit(1732650134.375:31104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15412 comm="syz.0.4680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3839b8e919 code=0x7ffc0000 [ 207.986115][ T29] audit: type=1326 audit(1732650134.375:31105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15412 comm="syz.0.4680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3839b8e919 code=0x7ffc0000 [ 208.009892][ T29] audit: type=1326 audit(1732650134.375:31106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15412 comm="syz.0.4680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3839b8e919 code=0x7ffc0000 [ 208.026473][T15421] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.033838][ T29] audit: type=1326 audit(1732650134.375:31107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15412 comm="syz.0.4680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3839b8e919 code=0x7ffc0000 [ 208.053115][T15421] ext4 filesystem being mounted at /329/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.069942][ T29] audit: type=1326 audit(1732650134.375:31108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15412 comm="syz.0.4680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3839b8e919 code=0x7ffc0000 [ 208.104728][ T29] audit: type=1326 audit(1732650134.385:31109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15412 comm="syz.0.4680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f3839b8e919 code=0x7ffc0000 [ 208.128593][ T29] audit: type=1326 audit(1732650134.385:31110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15412 comm="syz.0.4680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3839b8e919 code=0x7ffc0000 [ 208.157281][T10970] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.162624][T15400] Alternate GPT is invalid, using primary GPT. [ 208.172654][T15400] loop1: p2 p3 p7 [ 208.185963][T15428] netlink: 'syz.5.4686': attribute type 10 has an invalid length. [ 208.199086][T15428] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.206319][T15428] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.210861][T15431] netlink: 'syz.4.4685': attribute type 10 has an invalid length. [ 208.233198][T15428] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.240344][T15428] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.247771][T15428] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.254839][T15428] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.266690][T15428] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 208.307143][T15443] FAULT_INJECTION: forcing a failure. [ 208.307143][T15443] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 208.320263][T15443] CPU: 0 UID: 0 PID: 15443 Comm: syz.4.4693 Not tainted 6.12.0-syzkaller-09435-g2c22dc1ee3a1 #0 [ 208.330683][T15443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 208.340753][T15443] Call Trace: [ 208.344047][T15443] [ 208.346979][T15443] dump_stack_lvl+0xf2/0x150 [ 208.351608][T15443] dump_stack+0x15/0x20 [ 208.355783][T15443] should_fail_ex+0x223/0x230 [ 208.360523][T15443] should_fail+0xb/0x10 [ 208.364689][T15443] should_fail_usercopy+0x1a/0x20 [ 208.369756][T15443] _copy_from_user+0x1e/0xb0 [ 208.374460][T15443] do_ip6t_set_ctl+0x42c/0x8c0 [ 208.379239][T15443] ? kstrtouint+0x77/0xc0 [ 208.383644][T15443] nf_setsockopt+0x195/0x1b0 [ 208.388255][T15443] ipv6_setsockopt+0x10f/0x130 [ 208.393075][T15443] tcp_setsockopt+0x93/0xb0 [ 208.397578][T15443] sock_common_setsockopt+0x64/0x80 [ 208.402808][T15443] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 208.408790][T15443] __sys_setsockopt+0x187/0x200 [ 208.413764][T15443] __x64_sys_setsockopt+0x66/0x80 [ 208.418800][T15443] x64_sys_call+0x282e/0x2dc0 [ 208.423526][T15443] do_syscall_64+0xc9/0x1c0 [ 208.428053][T15443] ? clear_bhb_loop+0x55/0xb0 [ 208.432732][T15443] ? clear_bhb_loop+0x55/0xb0 [ 208.437439][T15443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.443374][T15443] RIP: 0033:0x7f679c82e919 [ 208.447928][T15443] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.467530][T15443] RSP: 002b:00007f679aea1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 208.475933][T15443] RAX: ffffffffffffffda RBX: 00007f679c9e5fa0 RCX: 00007f679c82e919 [ 208.484010][T15443] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000007 [ 208.492009][T15443] RBP: 00007f679aea1090 R08: 00000000000004a0 R09: 0000000000000000 [ 208.500045][T15443] R10: 0000000020000a40 R11: 0000000000000246 R12: 0000000000000001 [ 208.508007][T15443] R13: 0000000000000000 R14: 00007f679c9e5fa0 R15: 00007fffdbf50408 [ 208.516022][T15443] [ 208.621511][T15465] loop1: detected capacity change from 0 to 1024 [ 208.637006][T15459] loop5: detected capacity change from 0 to 2048 [ 208.645682][T15465] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 208.647968][T15467] loop3: detected capacity change from 0 to 164 [ 208.687276][T15465] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 208.704257][T15465] EXT4-fs (loop1): orphan cleanup on readonly fs [ 208.710908][T15465] EXT4-fs error (device loop1): ext4_free_blocks:6589: comm syz.1.4701: Freeing blocks not in datazone - block = 0, count = 4096 [ 208.725628][T15465] EXT4-fs (loop1): 1 orphan inode deleted [ 208.737269][T15459] Alternate GPT is invalid, using primary GPT. [ 208.743646][T15459] loop5: p2 p3 p7 [ 208.770230][T15465] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 208.813835][T15465] EXT4-fs error (device loop1): ext4_search_dir:1505: inode #2: block 16: comm syz.1.4701: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 209.060580][T15492] netlink: 3 bytes leftover after parsing attributes in process `syz.4.4711'. [ 209.069750][T15492] 0ªX¹¦À: renamed from caif0 [ 209.086435][T15494] tmpfs: Bad value for 'nr_inodes' [ 209.101512][T15492] 0ªX¹¦À: entered allmulticast mode [ 209.106840][T15492] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 209.231330][T15500] loop4: detected capacity change from 0 to 2048 [ 209.300095][T15500] Alternate GPT is invalid, using primary GPT. [ 209.306611][T15500] loop4: p2 p3 p7 [ 209.318201][T15509] bond0: (slave dummy0): Releasing backup interface [ 209.326808][T15509] bridge_slave_0: left allmulticast mode [ 209.332489][T15509] bridge_slave_0: left promiscuous mode [ 209.338372][T15509] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.353513][T15509] bridge_slave_1: left allmulticast mode [ 209.359242][T15509] bridge_slave_1: left promiscuous mode [ 209.364935][T15509] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.376251][T15509] bond0: (slave bond_slave_0): Releasing backup interface [ 209.388015][T15509] bond0: (slave bond_slave_1): Releasing backup interface [ 209.398012][T15509] team0: Port device team_slave_1 removed [ 209.404011][T15509] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.411571][T15509] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.463437][T10003] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.515721][T15506] loop5: detected capacity change from 0 to 256 [ 209.522701][T15506] msdos: Unexpected value for 'dots' [ 209.773934][T15534] tmpfs: Unknown parameter 'mp' [ 209.782663][T15534] x_tables: duplicate underflow at hook 1 [ 209.792894][T15534] netlink: 'syz.3.4726': attribute type 29 has an invalid length. [ 209.803148][T15534] netlink: 'syz.3.4726': attribute type 29 has an invalid length. [ 209.857505][T15539] loop3: detected capacity change from 0 to 164 [ 209.869905][T15539] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 209.880032][T15539] IPv6: NLM_F_CREATE should be specified when creating new route [ 209.921109][T15540] loop4: detected capacity change from 0 to 2048 [ 209.930313][T15545] loop3: detected capacity change from 0 to 164 [ 209.959174][T15540] Alternate GPT is invalid, using primary GPT. [ 209.959377][T15547] loop3: detected capacity change from 0 to 1024 [ 209.965591][T15540] loop4: p2 p3 p7 [ 209.973182][T15547] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 209.987058][T15547] JBD2: no valid journal superblock found [ 209.992876][T15547] EXT4-fs (loop3): Could not load journal inode [ 210.002979][T15547] Invalid ELF header magic: != ELF [ 210.015729][T15547] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4732'. [ 210.024662][T15547] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4732'. [ 210.042877][T15547] ipvlan11: entered allmulticast mode [ 210.055050][T15551] loop1: detected capacity change from 0 to 1024 [ 210.065784][T15551] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 210.085195][T15551] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 210.093348][T15551] EXT4-fs (loop1): orphan cleanup on readonly fs [ 210.111070][T15551] EXT4-fs error (device loop1): ext4_free_blocks:6589: comm syz.1.4736: Freeing blocks not in datazone - block = 0, count = 4096 [ 210.126995][T15551] EXT4-fs (loop1): 1 orphan inode deleted [ 210.133137][T15551] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 210.137912][T15560] syzkaller1: entered promiscuous mode [ 210.150999][T15560] syzkaller1: entered allmulticast mode [ 210.154174][T15551] EXT4-fs error (device loop1): ext4_search_dir:1505: inode #2: block 16: comm syz.1.4736: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 210.247517][T15567] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4736'. [ 210.266061][T15568] loop4: detected capacity change from 0 to 256 [ 210.293468][T15566] loop5: detected capacity change from 0 to 2048 [ 210.315243][T15566] EXT4-fs (loop5): failed to initialize system zone (-117) [ 210.322856][T15566] EXT4-fs (loop5): mount failed [ 210.347132][T15566] program +}[@ is using a deprecated SCSI ioctl, please convert it to SG_IO [ 210.511857][T15584] loop5: detected capacity change from 0 to 164 [ 210.609960][T15592] loop5: detected capacity change from 0 to 164 [ 210.618383][T15596] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4751'. [ 210.695482][T15603] netlink: 'syz.3.4753': attribute type 10 has an invalid length. [ 210.725545][T15605] loop3: detected capacity change from 0 to 736 [ 210.744629][T15589] loop0: detected capacity change from 0 to 256 [ 210.751105][T15589] msdos: Unexpected value for 'dots' [ 210.936529][T10003] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.937980][T15614] loop4: detected capacity change from 0 to 512 [ 210.976643][T15614] EXT4-fs warning (device loop4): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 211.000108][T15614] EXT4-fs (loop4): mount failed [ 211.100862][T15619] loop1: detected capacity change from 0 to 512 [ 211.144166][T15619] EXT4-fs warning (device loop1): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 211.145683][T15629] loop4: detected capacity change from 0 to 164 [ 211.166397][T15619] EXT4-fs (loop1): mount failed [ 211.207035][T15632] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4762'. [ 211.470847][T15648] loop1: detected capacity change from 0 to 512 [ 211.518202][T15648] EXT4-fs warning (device loop1): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 211.533680][T15648] EXT4-fs (loop1): mount failed [ 211.598086][T15658] loop0: detected capacity change from 0 to 512 [ 211.609587][T15660] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4773'. [ 211.645081][T15658] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.672594][T15658] ext4 filesystem being mounted at /398/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 211.755354][T10647] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.893205][T15670] loop0: detected capacity change from 0 to 164 [ 212.100529][T15681] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4779'. [ 212.394398][T15694] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4784'. [ 212.492136][T15679] loop4: detected capacity change from 0 to 256 [ 212.507693][T15679] msdos: Unexpected value for 'dots' [ 212.693913][T15706] loop1: detected capacity change from 0 to 512 [ 212.707247][T15706] EXT4-fs warning (device loop1): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 212.722419][T15706] EXT4-fs (loop1): mount failed [ 212.828126][T15714] loop1: detected capacity change from 0 to 1024 [ 212.836284][T15714] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 212.859010][T15714] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 212.868240][T15714] EXT4-fs (loop1): orphan cleanup on readonly fs [ 212.874868][T15714] EXT4-fs error (device loop1): ext4_free_blocks:6589: comm syz.1.4791: Freeing blocks not in datazone - block = 0, count = 4096 [ 212.890292][T15714] EXT4-fs (loop1): 1 orphan inode deleted [ 212.902893][T15714] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 212.946184][T15714] EXT4-fs error (device loop1): ext4_search_dir:1505: inode #2: block 16: comm syz.1.4791: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 212.988985][ T29] kauditd_printk_skb: 800 callbacks suppressed [ 212.989001][ T29] audit: type=1326 audit(1732650139.485:31907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15722 comm="syz.5.4794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc449ebe919 code=0x7ffc0000 [ 213.018987][ T29] audit: type=1326 audit(1732650139.485:31908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15722 comm="syz.5.4794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc449ebe919 code=0x7ffc0000 [ 213.042608][ T29] audit: type=1326 audit(1732650139.485:31909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15722 comm="syz.5.4794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc449ebe919 code=0x7ffc0000 [ 213.066515][ T29] audit: type=1326 audit(1732650139.485:31910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15722 comm="syz.5.4794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc449ebe919 code=0x7ffc0000 [ 213.075182][T15725] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4791'. [ 213.090209][ T29] audit: type=1326 audit(1732650139.485:31911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15722 comm="syz.5.4794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7fc449ebe919 code=0x7ffc0000 [ 213.122999][ T29] audit: type=1326 audit(1732650139.485:31912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15722 comm="syz.5.4794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc449ebe919 code=0x7ffc0000 [ 213.127503][T15729] syzkaller1: entered promiscuous mode [ 213.146684][ T29] audit: type=1326 audit(1732650139.485:31913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15722 comm="syz.5.4794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc449ebe919 code=0x7ffc0000 [ 213.152076][T15729] syzkaller1: entered allmulticast mode [ 213.181537][ T29] audit: type=1326 audit(1732650139.485:31914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15722 comm="syz.5.4794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc449ebe919 code=0x7ffc0000 [ 213.205249][ T29] audit: type=1326 audit(1732650139.485:31915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15722 comm="syz.5.4794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc449ebe919 code=0x7ffc0000 [ 213.228960][ T29] audit: type=1326 audit(1732650139.485:31916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15722 comm="syz.5.4794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc449ebe919 code=0x7ffc0000 [ 213.266613][T15731] loop5: detected capacity change from 0 to 256 [ 213.402391][T15743] loop4: detected capacity change from 0 to 164 [ 213.660829][T10003] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.767793][T15761] loop1: detected capacity change from 0 to 2048 [ 213.785121][T15761] EXT4-fs (loop1): failed to initialize system zone (-117) [ 213.795896][T15757] loop3: detected capacity change from 0 to 2048 [ 213.802316][T15761] EXT4-fs (loop1): mount failed [ 213.815118][T15755] program syz.1.4806 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 213.861611][T15757] Alternate GPT is invalid, using primary GPT. [ 213.868148][T15757] loop3: p2 p3 p7 [ 213.869832][T15753] loop0: detected capacity change from 0 to 256 [ 213.878844][T15753] msdos: Unexpected value for 'dots' [ 213.912001][T15769] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4809'. [ 214.057846][T15777] loop1: detected capacity change from 0 to 2048 [ 214.074434][T15784] loop5: detected capacity change from 0 to 128 [ 214.081349][T15784] FAT-fs (loop5): bread failed, FSINFO block (sector = 202) [ 214.091191][T15777] EXT4-fs (loop1): failed to initialize system zone (-117) [ 214.098655][T15777] EXT4-fs (loop1): mount failed [ 214.109026][T15777] program +}[@ is using a deprecated SCSI ioctl, please convert it to SG_IO [ 214.120496][T15784] loop5: detected capacity change from 0 to 256 [ 214.132599][T15784] FAT-fs (loop5): Directory bread(block 64) failed [ 214.139200][T15784] FAT-fs (loop5): Directory bread(block 65) failed [ 214.147312][T15784] FAT-fs (loop5): Directory bread(block 66) failed [ 214.154604][T15784] FAT-fs (loop5): Directory bread(block 67) failed [ 214.162034][T15777] geneve0: entered promiscuous mode [ 214.167344][T15777] geneve0: entered allmulticast mode [ 214.168656][T15784] FAT-fs (loop5): Directory bread(block 68) failed [ 214.179973][T15784] FAT-fs (loop5): Directory bread(block 69) failed [ 214.186666][T15784] FAT-fs (loop5): Directory bread(block 70) failed [ 214.193237][T15784] FAT-fs (loop5): Directory bread(block 71) failed [ 214.199891][T15784] FAT-fs (loop5): Directory bread(block 72) failed [ 214.206807][T15784] FAT-fs (loop5): Directory bread(block 73) failed [ 214.231682][T15788] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4815'. [ 214.250860][T15784] syz.5.4816: attempt to access beyond end of device [ 214.250860][T15784] loop5: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 214.394761][T15797] loop5: detected capacity change from 0 to 1024 [ 214.407412][T15797] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 214.445317][T15797] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 214.454601][T15797] EXT4-fs (loop5): orphan cleanup on readonly fs [ 214.500146][T15800] loop4: detected capacity change from 0 to 1024 [ 214.511304][T15795] loop1: detected capacity change from 0 to 2048 [ 214.517851][T15797] EXT4-fs error (device loop5): ext4_free_blocks:6589: comm syz.5.4820: Freeing blocks not in datazone - block = 0, count = 4096 [ 214.535618][T15795] EXT4-fs (loop1): failed to initialize system zone (-117) [ 214.547673][T15800] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 214.572886][T15797] EXT4-fs (loop5): 1 orphan inode deleted [ 214.581462][T15795] EXT4-fs (loop1): mount failed [ 214.588746][T15797] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 214.612411][T15800] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 214.635933][T15797] EXT4-fs error (device loop5): ext4_search_dir:1505: inode #2: block 16: comm syz.5.4820: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 214.655407][T15800] EXT4-fs (loop4): orphan cleanup on readonly fs [ 214.664288][T15800] EXT4-fs error (device loop4): ext4_free_blocks:6589: comm syz.4.4821: Freeing blocks not in datazone - block = 0, count = 4096 [ 214.696306][T15800] EXT4-fs (loop4): 1 orphan inode deleted [ 214.705650][T15800] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 214.731965][T15800] EXT4-fs error (device loop4): ext4_search_dir:1505: inode #2: block 16: comm syz.4.4821: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 214.772470][T15793] program syz.1.4818 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 214.802780][T15814] loop1: detected capacity change from 0 to 512 [ 214.823688][T15818] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4821'. [ 214.833938][T15814] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.846975][T15814] ext4 filesystem being mounted at /385/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.872799][T10003] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.896286][T15826] loop1: detected capacity change from 0 to 164 [ 214.906480][T15826] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 214.916212][T15826] IPv6: NLM_F_CREATE should be specified when creating new route [ 214.961606][T15829] loop0: detected capacity change from 0 to 164 [ 214.985066][T15828] loop1: detected capacity change from 0 to 2048 [ 215.007786][T15828] EXT4-fs (loop1): failed to initialize system zone (-117) [ 215.016094][T15828] EXT4-fs (loop1): mount failed [ 215.026708][T15828] program +}[@ is using a deprecated SCSI ioctl, please convert it to SG_IO [ 215.039537][T15828] geneve0: entered promiscuous mode [ 215.044836][T15828] geneve0: entered allmulticast mode [ 215.239534][T10343] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.366813][T15839] loop5: detected capacity change from 0 to 2048 [ 215.386102][T10970] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.411021][T15842] netlink: 'syz.4.4833': attribute type 10 has an invalid length. [ 215.437746][T15839] Alternate GPT is invalid, using primary GPT. [ 215.444280][T15839] loop5: p2 p3 p7 [ 215.530537][T15848] loop1: detected capacity change from 0 to 2048 [ 215.699142][T15848] EXT4-fs (loop1): failed to initialize system zone (-117) [ 215.714999][T15848] EXT4-fs (loop1): mount failed [ 215.735302][T15855] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15855 comm=syz.4.4838 [ 215.815022][T15865] loop4: detected capacity change from 0 to 512 [ 215.821779][T15865] EXT4-fs: Ignoring removed orlov option [ 215.823190][T15848] program +}[@ is using a deprecated SCSI ioctl, please convert it to SG_IO [ 215.839704][T15865] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 215.875113][T15872] netlink: 'syz.0.4845': attribute type 10 has an invalid length. [ 215.884529][T15865] EXT4-fs (loop4): orphan cleanup on readonly fs [ 215.891578][T15865] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4842: bg 0: block 248: padding at end of block bitmap is not set [ 215.907527][T15865] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.4842: Failed to acquire dquot type 1 [ 215.940991][T15865] EXT4-fs (loop4): 1 truncate cleaned up [ 215.948074][T15872] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 215.956407][T15865] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 215.980445][T15865] netlink: 277 bytes leftover after parsing attributes in process `syz.4.4842'. [ 215.982209][T15877] loop0: detected capacity change from 0 to 736 [ 216.006071][T15877] Symlink component flag not implemented [ 216.011863][T15877] Symlink component flag not implemented (122) [ 216.030830][T10970] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.042810][T15876] loop1: detected capacity change from 0 to 2048 [ 216.057343][T15882] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4849'. [ 216.071422][T15881] loop0: detected capacity change from 0 to 164 [ 216.142848][T15887] loop0: detected capacity change from 0 to 2048 [ 216.151387][T15876] Alternate GPT is invalid, using primary GPT. [ 216.157922][T15876] loop1: p2 p3 p7 [ 216.176405][T15887] EXT4-fs (loop0): failed to initialize system zone (-117) [ 216.181770][T15888] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15888 comm=syz.4.4852 [ 216.183795][T15887] EXT4-fs (loop0): mount failed [ 216.289775][T15898] loop1: detected capacity change from 0 to 128 [ 216.321075][T15887] geneve0: entered promiscuous mode [ 216.326335][T15887] geneve0: entered allmulticast mode [ 216.358146][T15905] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15905 comm=syz.1.4856 [ 216.380212][T15905] futex_wake_op: syz.1.4856 tries to shift op by -1; fix this program [ 216.418247][T15909] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4860'. [ 216.448483][T15913] FAULT_INJECTION: forcing a failure. [ 216.448483][T15913] name failslab, interval 1, probability 0, space 0, times 0 [ 216.461329][T15913] CPU: 0 UID: 0 PID: 15913 Comm: syz.0.4862 Not tainted 6.12.0-syzkaller-09435-g2c22dc1ee3a1 #0 [ 216.471825][T15913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 216.481962][T15913] Call Trace: [ 216.485246][T15913] [ 216.488184][T15913] dump_stack_lvl+0xf2/0x150 [ 216.493008][T15913] dump_stack+0x15/0x20 [ 216.497184][T15913] should_fail_ex+0x223/0x230 [ 216.501889][T15913] should_failslab+0x8f/0xb0 [ 216.506542][T15913] __kmalloc_node_track_caller_noprof+0xa8/0x410 [ 216.512917][T15913] ? sidtab_sid2str_get+0xb8/0x140 [ 216.518081][T15913] kmemdup_noprof+0x2a/0x60 [ 216.522594][T15913] sidtab_sid2str_get+0xb8/0x140 [ 216.527551][T15913] security_sid_to_context_core+0x1eb/0x2f0 [ 216.533572][T15913] security_sid_to_context+0x27/0x30 [ 216.538873][T15913] selinux_lsmprop_to_secctx+0x2c/0x40 [ 216.544409][T15913] security_lsmprop_to_secctx+0x4a/0x90 [ 216.549969][T15913] audit_log_task_context+0x93/0x1c0 [ 216.551118][T15917] program +}[@ is using a deprecated SCSI ioctl, please convert it to SG_IO [ 216.555372][T15913] audit_log_task+0xf9/0x1c0 [ 216.568643][T15913] audit_seccomp+0x68/0x130 [ 216.573288][T15913] __seccomp_filter+0x6fa/0x1180 [ 216.578237][T15913] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 216.583888][T15913] ? vfs_write+0x596/0x920 [ 216.588313][T15913] ? __schedule+0x6fa/0x930 [ 216.592829][T15913] __secure_computing+0x9f/0x1c0 [ 216.597925][T15913] syscall_trace_enter+0xd1/0x1f0 [ 216.602956][T15913] do_syscall_64+0xaa/0x1c0 [ 216.607477][T15913] ? clear_bhb_loop+0x55/0xb0 [ 216.612271][T15913] ? clear_bhb_loop+0x55/0xb0 [ 216.616861][T15923] loop4: detected capacity change from 0 to 128 [ 216.617010][T15913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.623772][T15923] FAT-fs (loop4): bread failed, FSINFO block (sector = 202) [ 216.629112][T15913] RIP: 0033:0x7f3839b8e919 [ 216.629131][T15913] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.660484][T15913] RSP: 002b:00007f3838201038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 216.668904][T15913] RAX: ffffffffffffffda RBX: 00007f3839d45fa0 RCX: 00007f3839b8e919 [ 216.676955][T15913] RDX: 0000000000000000 RSI: 0000000000000088 RDI: 0000000020000080 [ 216.684920][T15913] RBP: 00007f3838201090 R08: 0000000000000000 R09: 0000000000000000 [ 216.692887][T15913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.700937][T15913] R13: 0000000000000000 R14: 00007f3839d45fa0 R15: 00007fffdb4d8808 [ 216.708907][T15913] [ 216.721719][T15923] loop4: detected capacity change from 0 to 256 [ 216.739972][T15923] FAT-fs (loop4): Directory bread(block 64) failed [ 216.747181][T15923] FAT-fs (loop4): Directory bread(block 65) failed [ 216.755082][T15923] FAT-fs (loop4): Directory bread(block 66) failed [ 216.761696][T15923] FAT-fs (loop4): Directory bread(block 67) failed [ 216.792391][T15923] FAT-fs (loop4): Directory bread(block 68) failed [ 216.803240][T15923] FAT-fs (loop4): Directory bread(block 69) failed [ 216.810391][T15923] FAT-fs (loop4): Directory bread(block 70) failed [ 216.831783][T15923] FAT-fs (loop4): Directory bread(block 71) failed [ 216.841766][T15923] FAT-fs (loop4): Directory bread(block 72) failed [ 216.848469][T15923] FAT-fs (loop4): Directory bread(block 73) failed [ 216.866410][T15923] syz.4.4867: attempt to access beyond end of device [ 216.866410][T15923] loop4: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 216.975236][T15941] loop4: detected capacity change from 0 to 512 [ 217.011125][T15945] tmpfs: Bad value for 'nr_inodes' [ 217.016991][T15941] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.033926][T15941] ext4 filesystem being mounted at /370/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.067412][T10970] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.207363][T15956] netlink: 'syz.4.4880': attribute type 2 has an invalid length. [ 217.215891][ T9] IPVS: starting estimator thread 0... [ 217.308685][T15959] IPVS: using max 3024 ests per chain, 151200 per kthread [ 217.320855][T15967] loop1: detected capacity change from 0 to 128 [ 217.327959][T15967] FAT-fs (loop1): bread failed, FSINFO block (sector = 202) [ 217.341196][T15967] loop1: detected capacity change from 0 to 256 [ 217.365338][T15967] FAT-fs (loop1): Directory bread(block 64) failed [ 217.372235][T15967] FAT-fs (loop1): Directory bread(block 65) failed [ 217.379215][T15967] FAT-fs (loop1): Directory bread(block 66) failed [ 217.380096][T15972] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4886'. [ 217.385942][T15967] FAT-fs (loop1): Directory bread(block 67) failed [ 217.401597][T15967] FAT-fs (loop1): Directory bread(block 68) failed [ 217.408343][T15967] FAT-fs (loop1): Directory bread(block 69) failed [ 217.415595][T15967] FAT-fs (loop1): Directory bread(block 70) failed [ 217.422339][T15967] FAT-fs (loop1): Directory bread(block 71) failed [ 217.428973][T15967] FAT-fs (loop1): Directory bread(block 72) failed [ 217.435562][T15967] FAT-fs (loop1): Directory bread(block 73) failed [ 217.450855][T15974] loop4: detected capacity change from 0 to 1024 [ 217.454702][T15967] syz.1.4884: attempt to access beyond end of device [ 217.454702][T15967] loop1: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 217.458179][T15974] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 217.495609][T15974] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 217.503934][T15974] EXT4-fs (loop4): orphan cleanup on readonly fs [ 217.513235][T15977] loop1: detected capacity change from 0 to 1024 [ 217.514496][T15974] EXT4-fs error (device loop4): ext4_free_blocks:6589: comm syz.4.4887: Freeing blocks not in datazone - block = 0, count = 4096 [ 217.520528][T15977] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 217.534324][T15974] EXT4-fs (loop4): 1 orphan inode deleted [ 217.544296][T15977] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 217.549790][T15974] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 217.557540][T15977] EXT4-fs (loop1): orphan cleanup on readonly fs [ 217.576379][T15977] EXT4-fs error (device loop1): ext4_free_blocks:6589: comm syz.1.4888: Freeing blocks not in datazone - block = 0, count = 4096 [ 217.577705][T15974] EXT4-fs error (device loop4): ext4_search_dir:1505: inode #2: block 16: comm syz.4.4887: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 217.591068][T15977] EXT4-fs (loop1): 1 orphan inode deleted [ 217.615025][T15977] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 217.635751][T15977] EXT4-fs error (device loop1): ext4_search_dir:1505: inode #2: block 16: comm syz.1.4888: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 217.666285][T15979] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4887'. [ 217.748297][T15982] tmpfs: Bad value for 'nr_inodes' [ 217.848831][T15986] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15986 comm=syz.5.4891 [ 217.905885][T15989] loop5: detected capacity change from 0 to 128 [ 217.980816][T15998] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15998 comm=syz.5.4892 [ 217.998137][T15998] futex_wake_op: syz.5.4892 tries to shift op by -1; fix this program [ 218.009112][T16002] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4897'. [ 218.043161][T16004] loop0: detected capacity change from 0 to 512 [ 218.045228][T16000] program +}[@ is using a deprecated SCSI ioctl, please convert it to SG_IO [ 218.065902][T16004] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.078810][T16004] ext4 filesystem being mounted at /433/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.099877][ T29] kauditd_printk_skb: 719 callbacks suppressed [ 218.099894][ T29] audit: type=1326 audit(1732650144.595:32633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16003 comm="syz.0.4898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3839b8e919 code=0x7ffc0000 [ 218.130693][ T29] audit: type=1326 audit(1732650144.595:32634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16003 comm="syz.0.4898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3839b8e919 code=0x7ffc0000 [ 218.154361][ T29] audit: type=1326 audit(1732650144.595:32635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16003 comm="syz.0.4898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7f3839b8e919 code=0x7ffc0000 [ 218.177970][ T29] audit: type=1326 audit(1732650144.595:32636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16003 comm="syz.0.4898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3839b8e919 code=0x7ffc0000 [ 218.201599][ T29] audit: type=1326 audit(1732650144.595:32637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16003 comm="syz.0.4898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3839b8e919 code=0x7ffc0000 [ 218.226076][T10647] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.250035][T16011] loop0: detected capacity change from 0 to 128 [ 218.262085][T10970] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.264617][T16011] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 218.283669][T16011] ext4 filesystem being mounted at /434/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 218.309999][ T29] audit: type=1326 audit(1732650144.785:32638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16013 comm="syz.4.4901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f679c82e919 code=0x7ffc0000 [ 218.339845][ T29] audit: type=1326 audit(1732650144.785:32639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16013 comm="syz.4.4901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f679c82e919 code=0x7ffc0000 [ 218.363600][ T29] audit: type=1326 audit(1732650144.785:32640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16013 comm="syz.4.4901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f679c82e919 code=0x7ffc0000 [ 218.387276][ T29] audit: type=1326 audit(1732650144.785:32641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16013 comm="syz.4.4901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f679c82e919 code=0x7ffc0000 [ 218.400281][T16016] loop4: detected capacity change from 0 to 1024 [ 218.410858][ T29] audit: type=1326 audit(1732650144.785:32642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16013 comm="syz.4.4901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f679c82e919 code=0x7ffc0000 [ 218.419779][T16016] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 218.451772][T16016] JBD2: no valid journal superblock found [ 218.457693][T16016] EXT4-fs (loop4): Could not load journal inode [ 218.468142][T10647] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 218.473171][T16016] Invalid ELF header magic: != ELF [ 218.487469][T16016] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4902'. [ 218.496349][T16016] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4902'. [ 218.509320][T16016] ipvlan13: entered allmulticast mode [ 218.516600][T10003] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.617759][T16018] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16018 comm=syz.0.4903 [ 218.819093][T16031] loop0: detected capacity change from 0 to 2048 [ 218.847340][T16031] EXT4-fs (loop0): failed to initialize system zone (-117) [ 218.855803][T16031] EXT4-fs (loop0): mount failed [ 219.033541][T16043] loop5: detected capacity change from 0 to 512 [ 219.048975][T16043] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.062724][T16043] ext4 filesystem being mounted at /418/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.100750][T16031] geneve0: entered promiscuous mode [ 219.106040][T16031] geneve0: entered allmulticast mode [ 219.112566][T10343] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.144388][T16049] netlink: 'syz.3.4912': attribute type 10 has an invalid length. [ 219.221552][T16056] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4914'. [ 219.246506][T16058] loop3: detected capacity change from 0 to 736 [ 219.253887][T16056] syzkaller1: entered promiscuous mode [ 219.259369][T16056] syzkaller1: entered allmulticast mode [ 219.281821][T16058] Symlink component flag not implemented [ 219.287608][T16058] Symlink component flag not implemented (122) [ 219.351381][T16060] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16060 comm=syz.4.4917 [ 219.373219][T16068] loop3: detected capacity change from 0 to 128 [ 219.445789][T16074] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16074 comm=syz.3.4919 [ 219.461951][T16078] netlink: 'syz.5.4923': attribute type 10 has an invalid length. [ 219.496413][T16080] futex_wake_op: syz.3.4919 tries to shift op by -1; fix this program [ 219.535262][T16082] loop1: detected capacity change from 0 to 1024 [ 219.567416][T16082] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.634389][T10003] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.656106][T16092] tmpfs: Bad value for 'nr_inodes' [ 219.707011][T16094] loop1: detected capacity change from 0 to 736 [ 219.739409][T16094] Symlink component flag not implemented [ 219.745535][T16094] Symlink component flag not implemented (122) [ 219.990060][T16102] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4931'. [ 220.022420][T16106] loop0: detected capacity change from 0 to 512 [ 220.029808][T16104] syzkaller1: entered promiscuous mode [ 220.035560][T16104] syzkaller1: entered allmulticast mode [ 220.069640][T16106] EXT4-fs warning (device loop0): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 220.084772][T16106] EXT4-fs (loop0): mount failed [ 220.210653][T16114] FAULT_INJECTION: forcing a failure. [ 220.210653][T16114] name failslab, interval 1, probability 0, space 0, times 0 [ 220.223304][T16114] CPU: 0 UID: 0 PID: 16114 Comm: syz.0.4935 Not tainted 6.12.0-syzkaller-09435-g2c22dc1ee3a1 #0 [ 220.233827][T16114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 220.243877][T16114] Call Trace: [ 220.247148][T16114] [ 220.250078][T16114] dump_stack_lvl+0xf2/0x150 [ 220.254686][T16114] dump_stack+0x15/0x20 [ 220.258932][T16114] should_fail_ex+0x223/0x230 [ 220.263686][T16114] should_failslab+0x8f/0xb0 [ 220.268277][T16114] kmem_cache_alloc_noprof+0x52/0x320 [ 220.273682][T16114] ? vm_area_dup+0x2c/0x130 [ 220.278201][T16114] vm_area_dup+0x2c/0x130 [ 220.282532][T16114] __split_vma+0xf7/0x6a0 [ 220.286911][T16114] vms_gather_munmap_vmas+0x2a5/0x7a0 [ 220.292422][T16114] do_vmi_align_munmap+0x1a4/0x390 [ 220.297572][T16114] do_vmi_munmap+0x1eb/0x230 [ 220.302294][T16114] do_munmap+0x8b/0xc0 [ 220.306379][T16114] __se_sys_mremap+0x9be/0xf10 [ 220.311239][T16114] ? fput+0x1c4/0x200 [ 220.315286][T16114] __x64_sys_mremap+0x67/0x80 [ 220.319984][T16114] x64_sys_call+0x27e8/0x2dc0 [ 220.324678][T16114] do_syscall_64+0xc9/0x1c0 [ 220.329205][T16114] ? clear_bhb_loop+0x55/0xb0 [ 220.334028][T16114] ? clear_bhb_loop+0x55/0xb0 [ 220.338736][T16114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.344648][T16114] RIP: 0033:0x7f3839b8e919 [ 220.346979][T16120] tmpfs: Bad value for 'nr_inodes' [ 220.349058][T16114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.367788][T16121] netlink: 'syz.3.4936': attribute type 10 has an invalid length. [ 220.373739][T16114] RSP: 002b:00007f3838201038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 220.390033][T16114] RAX: ffffffffffffffda RBX: 00007f3839d45fa0 RCX: 00007f3839b8e919 [ 220.398070][T16114] RDX: 0000000000001000 RSI: 0000000000003000 RDI: 0000000020001000 [ 220.406085][T16114] RBP: 00007f3838201090 R08: 0000000020869000 R09: 0000000000000000 [ 220.414074][T16114] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 220.422050][T16114] R13: 0000000000000000 R14: 00007f3839d45fa0 R15: 00007fffdb4d8808 [ 220.430067][T16114] [ 220.456490][T16127] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4942'. [ 220.507425][T16131] loop4: detected capacity change from 0 to 736 [ 220.512757][T16125] loop1: detected capacity change from 0 to 512 [ 220.526538][T16125] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.539115][T16125] ext4 filesystem being mounted at /407/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 220.570079][T10003] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.602414][T16140] loop4: detected capacity change from 0 to 1024 [ 220.615791][T16140] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 220.649774][T16140] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 220.660764][T16140] EXT4-fs (loop4): orphan cleanup on readonly fs [ 220.676675][T16140] EXT4-fs error (device loop4): ext4_free_blocks:6589: comm syz.4.4945: Freeing blocks not in datazone - block = 0, count = 4096 [ 220.684141][T16144] loop3: detected capacity change from 0 to 2048 [ 220.691420][T16148] syzkaller1: entered promiscuous mode [ 220.701973][T16148] syzkaller1: entered allmulticast mode [ 220.702657][T16140] EXT4-fs (loop4): 1 orphan inode deleted [ 220.714226][T16140] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 220.715041][T16144] EXT4-fs (loop3): failed to initialize system zone (-117) [ 220.735075][T16144] EXT4-fs (loop3): mount failed [ 220.740303][T16140] EXT4-fs error (device loop4): ext4_search_dir:1505: inode #2: block 16: comm syz.4.4945: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 220.816707][T16151] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4945'. [ 220.825523][T16144] program +}[@ is using a deprecated SCSI ioctl, please convert it to SG_IO [ 220.830512][T16153] syz.1.4949[16153] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 220.834944][T16153] syz.1.4949[16153] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 220.846742][T16153] syz.1.4949[16153] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 220.903769][T16157] tmpfs: Bad value for 'nr_inodes' [ 221.077161][T16167] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4955'. [ 221.260344][T16181] syzkaller1: entered promiscuous mode [ 221.266346][T16181] syzkaller1: entered allmulticast mode [ 221.294417][T16186] loop0: detected capacity change from 0 to 1024 [ 221.301819][T16186] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 221.312700][T16186] JBD2: no valid journal superblock found [ 221.318702][T16186] EXT4-fs (loop0): Could not load journal inode [ 221.329055][T16186] Invalid ELF header magic: != ELF [ 221.340940][T16186] ipvlan18: entered allmulticast mode [ 221.358954][T16164] loop5: detected capacity change from 0 to 256 [ 221.369321][T16188] tmpfs: Bad value for 'nr_inodes' [ 221.376448][T16164] msdos: Unexpected value for 'dots' [ 221.469416][T16197] ================================================================== [ 221.477502][T16197] BUG: KCSAN: data-race in call_rcu / mtree_range_walk [ 221.484430][T16197] [ 221.486730][T16197] write to 0xffff888104533808 of 8 bytes by task 16195 on cpu 1: [ 221.494422][T16197] call_rcu+0x47/0x430 [ 221.498475][T16197] mas_replace_node+0x2fa/0x430 [ 221.503308][T16197] mas_wr_store_entry+0x1fbf/0x2d10 [ 221.508488][T16197] mas_store_prealloc+0x6bf/0x960 [ 221.513492][T16197] vma_complete+0x3a7/0x760 [ 221.517980][T16197] __split_vma+0x5d6/0x6a0 [ 221.522376][T16197] vma_modify+0xd3/0x1e0 [ 221.526602][T16197] vma_modify_flags+0xf1/0x120 [ 221.531349][T16197] mprotect_fixup+0x31a/0x5e0 [ 221.536008][T16197] do_mprotect_pkey+0x653/0x960 [ 221.540839][T16197] __x64_sys_mprotect+0x48/0x60 [ 221.545673][T16197] x64_sys_call+0x2770/0x2dc0 [ 221.550330][T16197] do_syscall_64+0xc9/0x1c0 [ 221.554817][T16197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.560695][T16197] [ 221.563007][T16197] read to 0xffff888104533808 of 8 bytes by task 16197 on cpu 0: [ 221.570644][T16197] mtree_range_walk+0x140/0x460 [ 221.575500][T16197] mas_walk+0x16e/0x320 [ 221.579653][T16197] lock_vma_under_rcu+0x95/0x260 [ 221.584576][T16197] exc_page_fault+0x150/0x650 [ 221.589240][T16197] asm_exc_page_fault+0x26/0x30 [ 221.594080][T16197] [ 221.596382][T16197] value changed: 0x000055557f92efff -> 0x0000000000000000 [ 221.603467][T16197] [ 221.605767][T16197] Reported by Kernel Concurrency Sanitizer on: [ 221.611898][T16197] CPU: 0 UID: 0 PID: 16197 Comm: syz.1.4965 Not tainted 6.12.0-syzkaller-09435-g2c22dc1ee3a1 #0 [ 221.622285][T16197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 221.632321][T16197] ================================================================== [ 221.651133][T10970] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.