last executing test programs: 1m56.571937229s ago: executing program 0 (id=498): syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000000)='./file2\x00', 0x1000, &(0x7f0000000180)={[{@dioread_lock}, {@noblock_validity}, {@mblk_io_submit}, {@noblock_validity}, {@debug}]}, 0xfc, 0x575, &(0x7f0000000800)="$eJzs3d9rU+cbAPDnpK3WH99vK4hsuxgFL+ZwprbdDwe7cJdjkwnbvQttLNLUSJOK7QT1Yt7sZshgjAlju9/9LmX/wP4KYRNkSNkudpNx0pMabdKmNTXRfD5w2vc956Tv++Sc5+17chISwMCaSH/kIl6NiG+SiLGmbcORbZxY32/t0fXZdEmiVvvsrySSbF1j/yT7fSirvBIRv30VcTK3ud3KyupCoVQqLmX1yerilcnKyuqpS4uF+eJ88fL0zMyZd2am33/v3a7F+ub5f77/9N5HZ74+vvbdLw+O3EnibBzOtjXH8QxuNlcmYiJ7Tkbi7FM7TnWhsX6S9LoD7MpQlucjkY4BYzGUZX1LtbHn2TVgj91I0xoYUIn8hwHVmAc0ru27dB38wnj44foF0Ob4h9dfG4nR+rXRwbXkiSuj9Hp3vAvtp238+ufdO+kS3XsdAmBbN29FxOnh4c3jX5KNf7t3uoN9nm7D+AfPz710/vNWq/lPbmP+Ey3mP4da5O5ubJ//uQddaKatdP73Qcv578ZNq/GhrPa/+pxvJLl4qVRMx7b/R8SJGNmf1re4n/NFbu1+rd3G5vlfuqTtN+aCWT8eDO9/8jFzhWrhmYJu8vBWxGst57/JxvFPWhz/9Pk432Ebx4p3X2+3bfv491btp4g3Wh7/x3e0kq3vT07Wz4fJxlmx2d+3j/3erv1ex58e/4Nbxz+eNN+vrey8jR9H/y2227bb839f8nm9vC9bd61QrS5NRexLPtm8fvrxYxv1xv5p/CeObz3+tTr/D6SJ3WH8t4/ebt51dGfx7600/rkdHf+dF+5//OUP7drv7Pi/XS+dyNZ0Mv512sFnee4AAAAAAACg3+Qi4nAkufxGOZfL59ff33E0DuZK5Ur15MXy8uW5qH9WdjxGco073WNN74eYyt4P26hPP1WfiYgjEfHt0IF6PT9bLs31OngAAAAAAAAAAAAAAAAAAADoE4ciRlt9/j/1x1CvewfsuS2+8ht4ybXP/2xLN77pCehL/v/D4JL/MLjkPwwu+Q+DS/7D4JL/MLjkPwyuneT/z+f2sCMAAAAAAAAAAAAAAAAAAAAAAAAAAADwcjh/7ly61NYeXZ9N63NXV5YXyldP7Y/KQn5xeTY/W166kp8vl+dLxfxseXG7v1cql69MTcfytclqsVKdrKysXlgsL1+uXri0WJgvXiiOPJeoAAAAAAAAAAAAAAAAAAAA4MVSWVldKJRKxSUFhV0VhvujG9sVkohoWlOr1W6k53/vO9avhV6PTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw2H8BAAD///ApOHQ=") r0 = open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file2', [{0x20, 'lazytime'}, {0x20, 'lazytime'}], 0xa, '}'}, 0x1e) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010101, @local}, @time_exceeded={0x80, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback}}}}}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200001400894fb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000280)={[{@stripe={'stripe', 0x3d, 0x10}}, {@stripe={'stripe', 0x3d, 0x4}}, {@dioread_nolock}, {@mblk_io_submit}, {@discard}, {@acl}]}, 0x1, 0x3dd, &(0x7f00000008c0)="$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") open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r6 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r6, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x12, 0x0, 0x1d, "ef359f413bb93852f7d6a4ae6dddfbff0edf110ff4117639e677df701905b9aafab4af000055a3f680040093b6225fcdeb4f0500", "cba3d6431108a059ca171ce1a3110700e429951e14ef0127b743562994ddb414000000000000000000000000000000000004000000000900", "9300e6d6a89ef31eea0700000000f8ff00", [0xffffffffffffffe6, 0xfffffffffffffffe]}) pwrite64(0xffffffffffffffff, &(0x7f0000000000)="e3", 0x1, 0xffff) syz_read_part_table(0x1060, &(0x7f0000000000)="$eJzsz7ttAkEABNDZ+9g+yZJdgiMX4T4sl+MrgYiQAohphirIkdCi+9ACELyXjGZXmtWGhzq0S9Yh2ZaS9Ekty9ka+WrmeClJl0tN6b6Py82YIR9vuz6ft/5ahiR/P1PbvKeMtTbzaJL1qfynPdfTNPa7v99PAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOB5XQMAAP//jJwQkg==") mlockall(0x7) socket(0x11, 0x3, 0x0) setsockopt$inet6_int(r1, 0x29, 0x7, &(0x7f0000000140), 0x4) sendfile(r5, r0, &(0x7f0000000240), 0x7f03) 1m54.038828541s ago: executing program 0 (id=508): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) fspick(0xffffffffffffffff, &(0x7f0000000580)='./file0\x00', 0x1) socket$kcm(0x11, 0xa, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000ffff0000001294cfddf9db46b700007377580b108976093bcce9dd163a33ad603655dba45effa053d677db3b884f2d81009da6c9697383e90438e68f46bcff318273705886596ee61ea40151ba3a570fcec3ea72d34a2c6dbaf7ed505de4b177fcf4f625f3a2dbd9342500279f1078c96ac178afdd591914d3a493f6b27d2d4388dbab0d8d93a8fc5be9c06a324af0a20cc7aaf94cb357b15a793459919ae0bbe92ab97b0876ac97957b143492e7f4c78918809bd6e06f7c05a02f653d5e1d8e2d1b99550a8de5f07657d9bfcb1eac18", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f00000037c0)=ANY=[@ANYBLOB="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"/4166], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x49) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) getpriority(0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000181100007f2486a8a582b0eaf93caee366f0f846b4f65fa05744ac6ea20bf6395563017018adbb9987755999529a3ab219f00c71088bc7d5aff7714c319ed32784cc9369da3049c8aecebd0071c16e6f9d9a45", @ANYRES32=r0, @ANYRES16], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x75, @void, @value}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r2) socket$nl_route(0x10, 0x3, 0x0) r3 = mq_open(&(0x7f00000007c0)='\r\x00elinu\xef\xe3elinux\x00\x86\xf6\x92\n#*\xac\x02\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a|\x9en\xbd\xeb\x14\x7f\xb9\x83\xfe\nf\xc26\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]G\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8S\\\xec\xa31_\v\x8a\xf2\x18\xa6\xb1\xbb\x8b9\x1e\xff\xf8\xcdX\xf7h\b\xaf\x01\x84\xd4\x06Ml(Bw=\x13\xa1&\xd3\xec\xa9\x8ba\x86\x9d\xf4\x11\n\x89z\xa5\xac\xcbh\xc2\x1b\xeay\xbf\x06\x80\xff\xdf\x93\xef\x7f\xb1\xaf\xa0\xae', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x7, 0x1, 0x5, 0x9}) mq_getsetattr(r3, &(0x7f0000000300)={0x800, 0x0, 0x1}, 0x0) 1m53.739037802s ago: executing program 0 (id=510): bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x8181, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000e000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000000ffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r3}, 0x3d) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r4}, 0x3d) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) gettid() sendmsg$inet(r5, &(0x7f0000001580)={0x0, 0xffffffffffffff3c, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f"}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a"}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f20cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae"}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r6, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) 1m52.778672507s ago: executing program 0 (id=516): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000700)={{0x1, 0x1, 0x18, r0, {0x9}}, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000002c0)='rpm_return_int\x00', r2}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000002c0)='rpm_return_int\x00', r4}, 0x10) syz_open_dev$usbfs(&(0x7f0000000040), 0x12, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x3, &(0x7f0000000000), 0xfc, 0x553, &(0x7f0000000180)="$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") r5 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r6, 0x5452, &(0x7f0000b28000)=0x3) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9}, 0x10) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) fcntl$setsig(r6, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r7}], 0x1, 0xffbffff5) r10 = dup2(r6, r7) fcntl$setown(r6, 0x8, r5) tkill(r5, 0x1f) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x833c) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000800), &(0x7f0000000840)=0x4) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f0000000080), 0x4) 1m51.625955472s ago: executing program 0 (id=521): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) fspick(0xffffffffffffffff, &(0x7f0000000580)='./file0\x00', 0x1) socket$kcm(0x11, 0xa, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000ffff0000001294cfddf9db46b700007377580b108976093bcce9dd163a33ad603655dba45effa053d677db3b884f2d81009da6c9697383e90438e68f46bcff318273705886596ee61ea40151ba3a570fcec3ea72d34a2c6dbaf7ed505de4b177fcf4f625f3a2dbd9342500279f1078c96ac178afdd591914d3a493f6b27d2d4388dbab0d8d93a8fc5be9c06a324af0a20cc7aaf94cb357b15a793459919ae0bbe92ab97b0876ac97957b143492e7f4c78918809bd6e06f7c05a02f653d5e1d8e2d1b99550a8de5f07657d9bfcb1eac18", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f00000037c0)=ANY=[@ANYBLOB="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"/4166], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x49) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) getpriority(0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000181100007f2486a8a582b0eaf93caee366f0f846b4f65fa05744ac6ea20bf6395563017018adbb9987755999529a3ab219f00c71088bc7d5aff7714c319ed32784cc9369da3049c8aecebd0071c16e6f9d9a45", @ANYRES32=r0, @ANYRES16], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x75, @void, @value}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r3 = mq_open(&(0x7f00000007c0)='\r\x00elinu\xef\xe3elinux\x00\x86\xf6\x92\n#*\xac\x02\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a|\x9en\xbd\xeb\x14\x7f\xb9\x83\xfe\nf\xc26\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]G\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8S\\\xec\xa31_\v\x8a\xf2\x18\xa6\xb1\xbb\x8b9\x1e\xff\xf8\xcdX\xf7h\b\xaf\x01\x84\xd4\x06Ml(Bw=\x13\xa1&\xd3\xec\xa9\x8ba\x86\x9d\xf4\x11\n\x89z\xa5\xac\xcbh\xc2\x1b\xeay\xbf\x06\x80\xff\xdf\x93\xef\x7f\xb1\xaf\xa0\xae', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x7, 0x1, 0x5, 0x9}) mq_getsetattr(r3, &(0x7f0000000300)={0x800, 0x0, 0x1}, 0x0) 1m51.052479465s ago: executing program 0 (id=524): getpid() r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 1m51.005650155s ago: executing program 32 (id=524): getpid() r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 2.865207117s ago: executing program 1 (id=1346): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x24}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f00000003c0)='kfree\x00', r3}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x20, 0x1, 0x70bd2d, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x4, 0x6}]}, 0x24}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000680)='kmem_cache_free\x00'}, 0x18) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000580)=[{0x0, 0x0, 0x3ff, 0x8}], 0x3e0000) syz_genetlink_get_family_id$tipc(&(0x7f0000001200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000851}, 0x880) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) migrate_pages(0x0, 0xfff, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1700000000000000040000040300000000001a00d3071112b5533ac0c238880e51eb1bff83d50f58835c4a1771", @ANYRES32=0x1, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000007c0)={&(0x7f0000000480)="302a80345982f08c0f27ff9afb316a44c87b7ffa759b2fecab23dfa3250ecf0c71199d578f283aebb775c4fbe535b5db5be044f2e9273a8ba94deb2d52341fef71209416196ee419edce4c59dcea66b4e77ef0ccca85a5610f3196c75b9da6fc8d18b11f8acf14e0af1a78b2007fa86bbc223b256ad3c24b33fff76865957e74e4d4b7dc3f630fcd5e13bca484fb8b32a3e0fe6ca331d6ab7ea4434aba5c278713208b08fbd5062d00f04c987eb0638b51c29bbe7723aa6aea6654f40f854f0550498d22789e2135c734e27c5ebc4e1e16bdc0c08052a8737970", &(0x7f0000000580)=""/1, &(0x7f00000005c0)="ae22aebedd383dd3b6401a72458978c2a13bbcfa797f8eed49bd82854360d19c7cef9ce11559e7d5cb6678507421c2c6a6c115a40cc6f29370eaee6f9dee32b7ebfc60e65c483b85eb2ffa7a304e71e569b58b345319c16d71830f206c5df10146f0ec6fc6cd466d69d6f9388aea087cc092df3313119f6e8d22eec38753d2db0ea3172e05a844e75f9249a01af1bff02175223364a31bba20b83fdf81efa304bddd731938bce9ea053f508d3c44fabd9a1f755b71f6949aa0", &(0x7f0000000680)="77744b9d426bd38d13db58af5b2ec54ed1aa55b9603ae0aa0d210fc66039fc9c23dac3da155a7fa250adb3bb8eaef9c8ac5928941192fbea69f1718575f76399e6a80e1d3ef76e7c5cd5d7bb9e961fade01182c6ef4bf226f101dcabcd97c9adbd3a3fcf88d7124994d5f418891d9da34f3fb8e478e433d7c9a3d2d810afbce9c63434069f2b082fe99325c6689e8b33b4201ba5baa322535e436af3b2c9b2a0372cfc68a5ad0503b2d726aa5f8a9b3393d66d6a", 0x4, 0xffffffffffffffff, 0x4}, 0x38) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000040000000000000000000085"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r6}, 0xe) creat(&(0x7f0000000040)='./bus\x00', 0x0) 2.737312667s ago: executing program 1 (id=1348): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x8000000000000000}, 0x18) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f00000005c0)={[{@nogrpid}, {@min_batch_time}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobarrier}, {@nodiscard}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000380), &(0x7f0000000180)=ANY=[], 0xfe37, 0x0) setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x0) r1 = socket(0x10, 0x3, 0x0) setitimer(0x1, &(0x7f00000001c0)={{}, {0x0, 0x2710}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001200010a001800000000000080"], 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x34, 0xd, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_FAMILY={0x5}]}, 0x34}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0x20, &(0x7f0000000580)={&(0x7f0000000500)=""/89, 0x59, 0x0, &(0x7f0000000b80)=""/4096, 0x1000}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x8, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r8 = dup3(r7, r4, 0x0) ioctl$MON_IOCX_GETX(r8, 0x40189206, &(0x7f0000000100)={&(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, 0x0, 0x43}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x50, &(0x7f00000001c0)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x20, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x36, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r9}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xe, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000ecff850000000400000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 2.134418s ago: executing program 3 (id=1357): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_START_REQ(r0, 0x0, 0x20000083) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@cgroup=r3, r4, 0x11, 0x0, r3, @void, @value}, 0x11) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r5 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCGRDESC(r5, 0x90044802, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB="000000000000400e00000000000000fb00000010", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bea100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x3, 0x8, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000008c0)='sys_enter\x00', r8, 0x0, 0xffffffffffffffff}, 0x18) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x11, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r7], 0x4c}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) 2.03589513s ago: executing program 5 (id=1358): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000380)='./file2\x00', 0x404, &(0x7f00000001c0)={[{@block_validity}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@jqfmt_vfsv0}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FIBMAP(r0, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb010018000000deffffff1034033920e58bcb99f836fbc40000001000000003000000010400000000000e030000000200d2251ab3003ebe099c29711308bde8f3fa1d65bace8a5f77e61efd023244f7afc63087e1f3f9331f3034350dd990acbffa1ed245247ace3c8382e0f6e514ff8d2e"], 0x0, 0x2b, 0x0, 0x0, 0x2, 0x0, @void, @value}, 0x28) gettid() socket$packet(0x11, 0xa, 0x300) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f00000001c0)={&(0x7f0000000ec0)=@name={0x1e, 0x2, 0x2, {{0x0, 0x3}, 0x1}}, 0x10, &(0x7f0000000880)=[{&(0x7f0000004480)="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", 0xea9}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000480)="13a8f06cbc2ac30d5863150179148e6d83abe2f58c3f362d823fd94bfc772c1d6ec89c5c8ddffacde29db5d99eeeac63aa6234bdae11420b7a79260ad2df7e009f80899180235f2669e0f704c59b72eefedbd4b491", 0x55}, {&(0x7f0000000580)="0fc634df5d4bd9746fb7eeefafd2b071eaba56ede73620d8314112f886c58cc2a8ee5450ba9d8c1d648064f896f298063e8bfbc32fe005db2522b4dc16e7a7f6fd3d608f613a35dde419c259770b0c19937fc14b6349c816d1f62b508524f74e67e04d1bc31e6623d306e76709b32a6f", 0x70}, {&(0x7f0000000600)="41a1696c65bfdcf200669b74734f077a8c017f6d95bff8cc7a464bb8d11ede166aaecb333b6dc3278f0af48d9bf8475e4d4837e29188b1a2e727cb322bbf7288cba5aa097cf580c48a8577fdf9d219ea21b409b319e06204f0ac8b4de3105e143e9603a316c73b85ec99d7658dee092bc82f8bf62472bd", 0x77}], 0x7}, 0x0) 1.868453871s ago: executing program 1 (id=1360): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f00000037c0)=ANY=[@ANYBLOB="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"/4164], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000300)='sys_enter\x00', r0}, 0x10) getpriority(0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r1 = mq_open(&(0x7f00000007c0)='\r\x00elinu\xef\xe3elinux\x00\x86\xf6\x92\n#*\xac\x02\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a|\x9en\xbd\xeb\x14\x7f\xb9\x83\xfe\nf\xc26\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]G\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8S\\\xec\xa31_\v\x8a\xf2\x18\xa6\xb1\xbb\x8b9\x1e\xff\xf8\xcdX\xf7h\b\xaf\x01\x84\xd4\x06Ml(Bw=\x13\xa1&\xd3\xec\xa9\x8ba\x86\x9d\xf4\x11\n\x89z\xa5\xac\xcbh\xc2\x1b\xeay\xbf\x06\x80\xff\xdf\x93\xef\x7f\xb1\xaf\xa0\xae', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x7, 0x1, 0x5, 0x9}) mq_getsetattr(r1, &(0x7f0000000300)={0x800, 0x0, 0x1}, 0x0) 1.804533251s ago: executing program 1 (id=1361): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x4000}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r3 = socket$packet(0x11, 0x2, 0x300) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200), 0x106, 0xa}}, 0x20) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='wchan\x00') preadv(r6, &(0x7f0000000080)=[{&(0x7f0000000000)=""/92, 0x5c}], 0x1, 0x0, 0x0) (async) preadv(r6, &(0x7f0000000080)=[{&(0x7f0000000000)=""/92, 0x5c}], 0x1, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 1.803990441s ago: executing program 5 (id=1362): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file2\x00', 0xc0ed0040, &(0x7f00000005c0)={[{@noblock_validity}, {@resuid}, {@data_err_abort}, {@noload}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@lazytime}]}, 0xfe, 0x472, &(0x7f0000000940)="$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") syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @random="b0c942034375", @void, {@ipv4={0x8864, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x22, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) r0 = open(&(0x7f0000000480)='.\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x18, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_io_uring_setup(0x24f9, &(0x7f0000000180)={0x0, 0x0, 0x10100, 0x0, 0x1000000}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000000c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000600)={r5, &(0x7f0000000080), &(0x7f0000000200)=""/153}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000500)=ANY=[@ANYBLOB="000000004c9002e3ff0000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) 1.703327292s ago: executing program 1 (id=1363): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) arch_prctl$ARCH_GET_UNTAG_MASK(0x4001, &(0x7f0000000680)) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x6, [@type_tag={0x10, 0x0, 0x0, 0x12, 0x5}, @union={0xc, 0x3, 0x0, 0x5, 0x1, 0x80, [{0xb, 0x0, 0x2}, {0x9, 0x3, 0x4}, {0xb, 0x0, 0x8}]}, @enum64={0xe, 0x3, 0x0, 0x13, 0x0, 0xa, [{0x9, 0x76, 0x8}, {0xf, 0x5, 0x9}, {0xd, 0xfffffbff, 0xa00000}]}]}, {0x0, [0x2e, 0x0, 0x0, 0x2e]}}, &(0x7f0000000580)=""/241, 0x8a, 0xf1, 0x1, 0x7, 0x0, @void, @value}, 0x28) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000019c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2000000000000134, &(0x7f0000000e40)=ANY=[@ANYBLOB="180100001700000000000000ff000100850000006d00000018110000", @ANYRES32=r4, @ANYRESDEC=r3, @ANYRESHEX=r1], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x141301) ioctl$USBDEVFS_CONTROL(r6, 0xc0105500, &(0x7f00000000c0)={0x80, 0x6, 0x303, 0x0, 0x61, 0x0, 0x0}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1b, &(0x7f00000000c0)=0x7a, 0x4) lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01) lgetxattr(0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x44000) r7 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDFONTOP_SET(r7, 0x4b72, &(0x7f0000000080)={0x0, 0x1, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="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"}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) 1.702851062s ago: executing program 5 (id=1364): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000001c0)={0x6ce2, 0x4, 0x1, 0x0, 0x0, [{{}, 0x7fffffff}]}) 1.608192712s ago: executing program 5 (id=1367): syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000000)='./file2\x00', 0x1000, &(0x7f0000000180)={[{@dioread_lock}, {@noblock_validity}, {@mblk_io_submit}, {@noblock_validity}, {@debug}]}, 0xfc, 0x575, &(0x7f0000000800)="$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") r0 = open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file2', [{0x20, 'lazytime'}, {0x20, 'lazytime'}], 0xa, '}'}, 0x1e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200001400894fb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000280)={[{@stripe={'stripe', 0x3d, 0x10}}, {@stripe={'stripe', 0x3d, 0x4}}, {@dioread_nolock}, {@mblk_io_submit}, {@discard}, {@acl}]}, 0x1, 0x3dd, &(0x7f00000008c0)="$eJzs3M1uG0UcAPD/bj5K0g8HiQMqHCyBIAiI60CAIiQKVz4uwANYSVoq3KZqjERLDgVx4sQBcePQF+DAA1QVQkLiFXgBVKlCaQ5wC1p713FjO8SKHdPk95NGnlmPO/Pf3a5mNrsTwLFVjogLETEREYsRUcq3p3mKW62U1XuwubG8tbmxnMT29kd/JZHk24p/K8k/T+aF+TQi/SbiqVvd7a7fuPlZrV5fvZ6XK40r1yrrN26+fPlK7dLqpdWr1dfPV6tLi29UXx1arD88+8L5iXcvnP3xj9Ldpenpmay/p/LvOuMYlnKU2/tkt6VhNzZm0+PuAAAA+5LmY//J5vi/FBPNXEspKhtj7RwAAAAwFNtv558AAADAEZaY+wMAAMARVzwH8GBzY7lIY3wc4dDdfyci5nbebd5qxz8Zj+V1pkb4fms5Iq49l5SyFCN6DxkAoNPdbPxzrtf4L40nO+qdiGiOh2aG3H55V7l7/JPeG3KTD8nGf29FxFbX+C8tqsxN5KXTzaHiVHLxcn31XESciYj5mDqRlat7tPHe3z992O+7LP5fk9NnipS1n33u1EjvTZ54+DcrtUbtIDF3uv9VxNnJXvEn7fFvEhGzB2hj4svbb/b77r/jH63t2xHP9zz+Oyv3JHuvT1Rpng+V4qzo9s/XP3/Qr/1xx58d/9m9459LOtdrWh+8jTuf/v50M9Mjqs75zyDn/3TycTNfzMu+qDUa16sR08n73dsXd35blIv6Wfzzz/T+/19c/5J8TatT+TVgUN9+98tLe9doxZ+lrP1iLngYsvhXBjr+g2deu/PbJ/3a7zz+vePPjn9rDbD5fMt+rn/77eBB9h0AAAA8KtLmfY0kXWjn03RhoXW/44mYTetr640XL659fnWldf9jLqbS4k5XqeN+aLX1Z/R2eXFX+ZWIeDwivi/NNMsLy2v1lXEHDwAAAMfEyT7z/8yfh/YUAgAAADByc+PuAAAAADBy5v8AAABwpB1kXb/jm8n23P+gGzIyI8uM+8oEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwaPs3AAD//9oMtCQ=") r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db) open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r7 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r7, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x12, 0x0, 0x1d, "ef359f413bb93852f7d6a4ae6dddfbff0edf110ff4117639e677df701905b9aafab4af000055a3f680040093b6225fcdeb4f0500", "cba3d6431108a059ca171ce1a3110700e429951e14ef0127b743562994ddb414000000000000000000000000000000000004000000000900", "9300e6d6a89ef31eea0700000000f8ff00", [0xffffffffffffffe6, 0xfffffffffffffffe]}) pwrite64(r6, &(0x7f0000000000)="e3", 0x1, 0xffff) mlockall(0x7) socket(0x11, 0x3, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x7, &(0x7f0000000140), 0x4) sendfile(r5, r0, &(0x7f0000000240), 0x7f03) 1.500438562s ago: executing program 3 (id=1368): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) arch_prctl$ARCH_GET_UNTAG_MASK(0x4001, &(0x7f0000000680)) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x6, [@type_tag={0x10, 0x0, 0x0, 0x12, 0x5}, @union={0xc, 0x3, 0x0, 0x5, 0x1, 0x80, [{0xb, 0x0, 0x2}, {0x9, 0x3, 0x4}, {0xb, 0x0, 0x8}]}, @enum64={0xe, 0x3, 0x0, 0x13, 0x0, 0xa, [{0x9, 0x76, 0x8}, {0xf, 0x5, 0x9}, {0xd, 0xfffffbff, 0xa00000}]}]}, {0x0, [0x2e, 0x0, 0x0, 0x2e]}}, &(0x7f0000000580)=""/241, 0x8a, 0xf1, 0x1, 0x7, 0x0, @void, @value}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000019c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2000000000000134, &(0x7f0000000e40)=ANY=[@ANYBLOB="180100001700000000000000ff000100850000006d00000018110000", @ANYRES32=r4, @ANYRESDEC=r2, @ANYRESHEX=r0], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x141301) ioctl$USBDEVFS_CONTROL(r6, 0xc0105500, &(0x7f00000000c0)={0x80, 0x6, 0x303, 0x0, 0x61, 0x0, 0x0}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1b, &(0x7f00000000c0)=0x7a, 0x4) lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01) lgetxattr(0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg2\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x44000) r7 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDFONTOP_SET(r7, 0x4b72, &(0x7f0000000080)={0x0, 0x1, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="387ed7626d850509a2d6c1aa38f15cd00f85c263cb226db671261fff7ce9c555f189afae3530db6dd493f28fd988721b9ae21b3e3b4523ae2594f47d8f62b480c4160b1f90ac9c41fae6ab12ac4c113fef588684ef495689092883b902a41cd75387ef6f7bc7d460d5e665f398ff95596dc94ec97003a3db08e500c2fb07e11aa4031a61c51caf7a65a2b613bda33f3eaeae635d7cd81761e74c38a7695800a15516eb337056e02335f9a7d10aa2eaf7beb7e1f7a1e850ecb3421143c5c4ded0f083a0c524dcf320827266819b6a952db5bc96141b26c54db857edbcbbc81c7af7aadf50bc549974b6401a19cdb130282b955592efa94242065a4c8d695a2cdd9ada350defd58c775b92d348305774d3a256c7520b285d8da0dbf5e20d604413ed2ddf9bcbf881caf811852806175d63892a15234fbcd7a88a2a0aea45d19148f0e7dada7d6d0d77881387fdeaa02863be90b88dfff412bff40c31c6415c54ae3335e54a49d315851feffe30d999c36def4df7df747695ef060000001bbe1b649f42f310859122c0d2c1e558dc6586958a28374f386ecf369274e43003a09b5159ea515eb44521901ef0d00baa91c10a8e44a76aac3468a15bd3d45ad389977467f306f9bcde071b30769795eed2f1580414d168f557cd90040c4bd2a3d6bc509254a12cece59181fcb5bad8c24bd9f8f78d17ab01831325501e80d899e9252f99d3a2666343392fda115048e4f4dd9f45657f8224fc78eb1168fe0527fac33466aadf48f16994d29a47778566e0f3945b2bf36b6eecc7fa18914beb66ac9e519bd3330000000000000009a3237aebbe3bed781e39d5a0fb0cdc60e196f2261305feb596b5b66ab89d2d6333f699b16db68986ab3eee7b199fefb5f79ffb2d1050e46982af1c14a88dd9b647ba812f56a8404755c73e74bb90e64bab9647c70ed5afca1c3d87907d14df8aa9df6f40a80ace2bb8a2aad3b0c66915927db4173181943d88c0c76d5969e2043db5bd77fd60ba0f012139929ccfec965c1f769785a4d23332d71f0875e3146afef5b20cc306d3ecee65944fe9829e0ad0c3f6bb2fdc1bc31152538db50f47dc38ba908a0d808687e478a609fe0daa0000000000000000e7f2e98597e27f3e1dba9c3c16e9fab3bda6ed33cb1c75513e2264b69d4794ded98eff9aa53d22eb77c9d93169c04ab2490bf28106f770e07eb7a9e8fd4e71929f918b98c4cbfcb11a90139264a9ee807c973167f493760278df0cc34be9e8f86f948d9a62e63ad6ca9d174d2465380b1a00ddc42915e4f3a5db640600000095a3d63904c9ecd1c313c08e29b814bd8fed1ab6d2846c73345962895d289ac77152cac2e04c93a5470774975b42091f218dd1e68a15f8226577bf9481ae0555db64a717eb23a811356d00000000ddffffff00"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 1.253549774s ago: executing program 3 (id=1370): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000900)={[{@noblock_validity}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@stripe={'stripe', 0x3d, 0x3}}, {@noauto_da_alloc}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5}}, {@resuid}, {@dioread_lock}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x10a42, 0x162) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3fffffff403}) r1 = syz_io_uring_setup(0x16d2, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1c2}, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) r6 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r6, &(0x7f0000000080)={0x1d, r5}, 0x18) sendmsg$can_j1939(r6, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000100000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7}, 0x10) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630b00c145f94cd977", 0x18, 0xffffffffffffffff) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000001c0)={0x7, 0x0}, 0x8) r9 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r9, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000010"], 0xfe44, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x8, 0x5, 0x658, 0x208, 0x328, 0xffffffff, 0x328, 0x0, 0x588, 0x588, 0xffffffff, 0x588, 0x588, 0x5, 0x0, {[{{@uncond, 0xb7030000, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1d, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@private0, @port, @gre_key}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0x4000}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@dev, @icmp_id, @icmp_id}}}, {{@ipv6={@mcast1, @local, [], [], 'wg1\x00', 'virt_wifi0\x00'}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@srh={{0x30}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv4, @icmp_id, @icmp_id}}}, {{@ipv6={@rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @empty}, [], [], 'dummy0\x00', 'syzkaller0\x00'}, 0x0, 0x218, 0x260, 0x0, {}, [@common=@inet=@sctp={{0x148}}, @common=@mh={{0x28}, {"0c06"}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@multicast1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6b8) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xc, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, r9, 0x0, 0x0, 0x0, 0x0, 0x800, @void, @value}, 0x19) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r11}, 0x10) io_uring_enter(r1, 0x2d7e, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x143042, 0x0) r12 = socket(0x10, 0x2, 0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000004c0)='kfree\x00', r13}, 0x18) sendto$inet6(r12, &(0x7f00000007c0)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006020a0000000d0085a168d0bf46d32345653600648d270020000a00070849935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000407160012000a0000000000e000e218d1dd3b6ed538f6523250", 0x78, 0x0, 0x0, 0xe0ffffff) 1.035201255s ago: executing program 2 (id=1371): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r4 = add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00', 0xc, r3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000240)=ANY=[@ANYRES16=r4, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000007f1600850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000003c0)='br_fdb_external_learn_add\x00', r5}, 0x18) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="060025"], 0x50) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000400)='rpcgss_upcall_result\x00'}, 0x18) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r6, 0x34}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f00000600000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="20000000000000000000000000000000000000000100000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r8}, 0x10) syz_io_uring_setup(0x1f85, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100), &(0x7f0000000000)) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kfree\x00', r9}, 0x18) r10 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$selinux_load(r10, &(0x7f0000000580)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e7578f8badf737cfb55caef48a8d95646b83ad261dbbb221f34f580c7d61a82f39cb3234bf5be8eb34dea891880a481737942e58484ae1aa2d9c72bc855dbf1a449e580dcf12462f763d2bd8ecc3a5822f4b3e22ff0e613b74496e3cdaf08cf79b77311553ad53e9acaf9bf04b39454eda30a2415319f3a3b98138191d43c55041b58a87cb354a8445139afae5e2e86202899960d5870750c55d3373f50f4543ada452f4768ac43b4a2e9e37d21ab459db13684fab6a80258d3174a1fbc2e0722f1664e4595"], 0x2000) 693.628596ms ago: executing program 5 (id=1374): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', r0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000040), 0x0, 0x0, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='trusted.overlay.redirect\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) unshare(0xa00) utime(&(0x7f0000000180)='./file0\x00', 0x0) 693.056727ms ago: executing program 2 (id=1375): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file2\x00', 0xc0ed0040, &(0x7f00000005c0)={[{@noblock_validity}, {@resuid}, {@data_err_abort}, {@noload}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@lazytime}]}, 0xfe, 0x472, &(0x7f0000000940)="$eJzs3MtvG8UfAPDvOk6a9PFLfyU8GloIFETEI2nSBz1wAYHEAQQSHIo4BSetQt0GNUGiVQSBQxDigCpxRxyR+As4wQUBJySucEeVEMqlhZPR2rtp4tohDydO8ecjbTuzu+7Md2fHnp2xG0DHGkr/SCL2R8SvEdEfEcX6E4Zqf91cmi/9tTRfSqJSee3PJH1Z3FiaL2X/RHVL7avtqFSy/J4G5S6+GTFRLk9dzvKjcxffGZ29cvWp6YsT56fOT10aP3Pm5ImjPafHT7UkzjSuG4Pvzxw5/OIb114unb321o9fp/Xdnx3P42ilodrVbejRVhfWZgdWpJNiGyvChhzI+nt3tf/3R1f0LR/rjxc+amvlgG1VqVQqjT6fMwsV4D8siXbXAGiP/IM+ff7Ntx0aeuwKfzxbewBK476ZbbUjxShk53TXPd+2Um9EnF34+4t0i22ahwAAWOnbdPzzZKPxXyHuWXHe/7I1lIMR8f+IOBQRd0XEQETcHVE9996IuG+D5devkNw+/ilc31Rg65SO/57J1rZWj//y0V8c7MpyB6rxdyfnpstTx7NrMhzde9L82KqXrPbd8798Vr/v02yafWjF+C/d0vLzsWBWj+vFugm6yYm5iZYEn8b/YcRgsVH8yfI6YBIRhyNicJNlTD/+1ZFmx/49/jW0YJ2p8mXEY7X2X4i6+HNJ0/XJsadPj58a7Y3y1PHR/K643U8/L77arPwtxd8CafvvbXj/1+JPnxGT3ojZK1cvVNdrZzdexuJvH5eSJscGNnn/9ySvV9M92b73JubmLo9F9CQvpdm+VfvHb702z+fnp/EPH2vc/w/VHs+qV+L+iEhv4qMR8UBEPJi13UMR8XBEHFsj/h+ee+TtZseat/8as/ItlMY/uUb7p295aepW+2880XXh+2+alV9ZV/ufrKaGsz3ref9bbwW3cu0AAADgTlGofgc+KYwspwuFkZHad/gHYm+hPDM798S5mXcvTda+K38wugv5TFf/ivnQsWxuOM+P1+VPZPPGn3f1VfMjpZnyZLuDhw63r0n/T/3e1e7aAdvO77Wgc+n/0Ln0f+hc+j90Lv0fOlRP490f7HQ9gLbY+Od/77bUA9h5xv/QufR/6Fz6P3Skpr+NL2zpJ/93aqK4O6rRMNG3O6qRJ6KwK6rRusQrn9S6xG6pT54orvs/s9hkYk/DQ+1+ZwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGiNfwIAAP//RwfmeQ==") syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @random="b0c942034375", @void, {@ipv4={0x8864, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x22, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) r0 = open(&(0x7f0000000480)='.\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x18, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_io_uring_setup(0x24f9, &(0x7f0000000180)={0x0, 0x0, 0x10100, 0x0, 0x1000000}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000000c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000600)={r5, &(0x7f0000000080), &(0x7f0000000200)=""/153}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000500)=ANY=[@ANYBLOB="000000004c9002e3ff0000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) 516.042357ms ago: executing program 1 (id=1376): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) arch_prctl$ARCH_GET_UNTAG_MASK(0x4001, &(0x7f0000000680)) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x6, [@type_tag={0x10, 0x0, 0x0, 0x12, 0x5}, @union={0xc, 0x3, 0x0, 0x5, 0x1, 0x80, [{0xb, 0x0, 0x2}, {0x9, 0x3, 0x4}, {0xb, 0x0, 0x8}]}, @enum64={0xe, 0x3, 0x0, 0x13, 0x0, 0xa, [{0x9, 0x76, 0x8}, {0xf, 0x5, 0x9}, {0xd, 0xfffffbff, 0xa00000}]}]}, {0x0, [0x2e, 0x0, 0x0, 0x2e]}}, &(0x7f0000000580)=""/241, 0x8a, 0xf1, 0x1, 0x7, 0x0, @void, @value}, 0x28) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000019c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2000000000000134, &(0x7f0000000e40)=ANY=[@ANYBLOB="180100001700000000000000ff000100850000006d00000018110000", @ANYRES32=r4, @ANYRESDEC=r3, @ANYRESHEX=r1], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x141301) ioctl$USBDEVFS_CONTROL(r6, 0xc0105500, &(0x7f00000000c0)={0x80, 0x6, 0x303, 0x0, 0x61, 0x0, 0x0}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1b, &(0x7f00000000c0)=0x7a, 0x4) lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01) lgetxattr(0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x44000) r7 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDFONTOP_SET(r7, 0x4b72, &(0x7f0000000080)={0x0, 0x1, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="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"}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) 461.297318ms ago: executing program 3 (id=1377): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000001c0)={0x6ce2, 0x4, 0x1, 0x0, 0x0, [{{}, 0x7fffffff}]}) 460.772367ms ago: executing program 5 (id=1378): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_START_REQ(r0, 0x0, 0x20000083) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@cgroup=r3, r4, 0x11, 0x0, r3, @void, @value}, 0x11) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r5 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCGRDESC(r5, 0x90044802, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB="000000000000400e00000000000000fb00000010", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bea100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x3, 0x8, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000008c0)='sys_enter\x00', r8, 0x0, 0xffffffffffffffff}, 0x18) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x11, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r7], 0x4c}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) 459.867268ms ago: executing program 2 (id=1379): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000020000000000000312c9aa", @ANYRES8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$cgroup_ro(r4, &(0x7f0000000080)='devices.list\x00', 0x275a, 0x0) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000040)='./bus\x00', 0xaf38134fc34be5e9, &(0x7f0000000180)=ANY=[@ANYRES64=r3, @ANYRESOCT=r0, @ANYRESDEC=r0, @ANYRESOCT=r1, @ANYRES32=r0], 0x1, 0x217, &(0x7f0000000780)="$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") r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffff22, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0005}]}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r7, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r8 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@private=0xa010100, @in6=@loopback, 0xfffc, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, 0x3, 0x0, 0x1, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x34}, 0x0, 0x6c}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3507, 0x0, 0x0, 0x3, 0x0, 0x0, 0xf83a}}, 0xe8) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r9, &(0x7f0000000000)=[{&(0x7f0000000080)=""/4094, 0xffe}], 0x1, 0x33, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r9) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) syz_emit_ethernet(0x1f, &(0x7f0000000140)=ANY=[@ANYBLOB="2105000b1e85b11c60b11300001142"], 0x0) 434.555638ms ago: executing program 4 (id=1380): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) arch_prctl$ARCH_GET_UNTAG_MASK(0x4001, &(0x7f0000000680)) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x6, [@type_tag={0x10, 0x0, 0x0, 0x12, 0x5}, @union={0xc, 0x3, 0x0, 0x5, 0x1, 0x80, [{0xb, 0x0, 0x2}, {0x9, 0x3, 0x4}, {0xb, 0x0, 0x8}]}, @enum64={0xe, 0x3, 0x0, 0x13, 0x0, 0xa, [{0x9, 0x76, 0x8}, {0xf, 0x5, 0x9}, {0xd, 0xfffffbff, 0xa00000}]}]}, {0x0, [0x2e, 0x0, 0x0, 0x2e]}}, &(0x7f0000000580)=""/241, 0x8a, 0xf1, 0x1, 0x7, 0x0, @void, @value}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000019c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2000000000000134, &(0x7f0000000e40)=ANY=[@ANYBLOB="180100001700000000000000ff000100850000006d00000018110000", @ANYRES32=r4, @ANYRESDEC=r2, @ANYRESHEX=r0], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x141301) ioctl$USBDEVFS_CONTROL(r6, 0xc0105500, &(0x7f00000000c0)={0x80, 0x6, 0x303, 0x0, 0x61, 0x0, 0x0}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1b, &(0x7f00000000c0)=0x7a, 0x4) lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01) lgetxattr(0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg2\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x44000) r7 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDFONTOP_SET(r7, 0x4b72, &(0x7f0000000080)={0x0, 0x1, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="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"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 375.552958ms ago: executing program 4 (id=1381): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/11], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000001c0)={0x6ce2, 0x4, 0x1, 0x0, 0x0, [{{}, 0x7fffffff}]}) 292.289858ms ago: executing program 3 (id=1382): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000007000000080000000900000001000000fdd2985c9e32d96ae69887cd0bc78c14bc784eed43f86f9a3ff2cedd248f16672dbca650213da94b01de080d38ee0a8edc2692bd4aef35592eb5cd33007f4351b815ac89d0e639993916191273495fdd8b290a2eacb23db8a53fe1cc3250156e6d4e2eb5b543fab68b0f7ca09ff08b06", @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) connect$inet(r0, &(0x7f0000000580)={0x2, 0x4e23, @remote}, 0x10) write$tcp_mem(r0, &(0x7f0000000280)={0x11, 0x2d, 0x0, 0x3a, 0xfffffffffffffffe, 0x2c}, 0x48) 291.842099ms ago: executing program 4 (id=1383): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000004000000800000000200000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="090300000000000000002200000004000180"], 0x18}, 0x1, 0xf000000}, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) socket(0x10, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00'}, 0x18) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 256.415209ms ago: executing program 4 (id=1384): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, @void, @value}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=@newsa={0x1dc, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in=@local, 0x0, 0x0, 0x4e25}, {@in=@loopback, 0x0, 0x32}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x101, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}, {0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x70bd29, 0x0, 0x2}, [@algo_crypt={0xdd, 0x2, {{'ecb(cipher_null)\x00'}, 0x4a8, "b9edcf99b462ce45fa4e2a19e47b740334c53bc63c3611732c7e6eda87ef5f06b5ff4f9b51adb05cc236c04d7fb8f4236230c2bdac72bb7125b4911fa3052edcfc930b074234a83b95ca4a5adebb9ebc679f6f2187865bef251a37d5dfe56b3186223273b9c7ba090663ecbceb4e50d5c779596ec7f1246fcf6be86564d25faaed94c49ac13cbfc7797bdccdf2c899c99cc8ed9798"}}, @offload={0xc}]}, 0x1dc}}, 0x40080c0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d214"], 0x68}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0xffef, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) 225.911339ms ago: executing program 2 (id=1385): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async, rerun: 64) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async, rerun: 64) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r3}, 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2}, &(0x7f0000000200), &(0x7f0000000340)=r3}, 0x20) (async, rerun: 32) r4 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xf}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) (async) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0xfffffdf8, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r7}, 0x10) (async) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) r8 = socket$inet_dccp(0x2, 0x6, 0x0) recvmmsg(r8, &(0x7f0000000c00)=[{{&(0x7f0000000cc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000080)=""/9, 0x9}, {&(0x7f00000003c0)=""/67, 0x43}, {&(0x7f0000000180)=""/59, 0x3b}, {&(0x7f0000000280)=""/37, 0x25}], 0x4, &(0x7f00000004c0)=""/175, 0xaf}, 0x6}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000580)=""/90, 0x5a}], 0x1, &(0x7f0000000640)=""/74, 0x4a}, 0x7}, {{&(0x7f00000006c0)=@isdn, 0x80, &(0x7f0000000800)=[{&(0x7f0000000740)=""/178, 0xb2}, {&(0x7f00000008c0)=""/173, 0xad}, {&(0x7f0000000980)=""/114, 0x72}, {&(0x7f0000000a00)=""/145, 0x91}], 0x4, &(0x7f0000000b40)=""/190, 0xbe}, 0xb7}], 0x3, 0x0, &(0x7f0000000ac0)) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) 92.5637ms ago: executing program 3 (id=1386): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x0, 0x6}, 0xc) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000100)={r2, 0x6}, 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2ab, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000008c0)='sys_enter\x00', r3}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = inotify_init() creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) inotify_add_watch(r4, &(0x7f0000000240)='./file0\x00', 0x8c7) socket$inet_tcp(0x2, 0x1, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)='J', 0x1}], 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) (async) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x0, 0x6}, 0xc) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) shutdown(r1, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) (async) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000100)={r2, 0x6}, 0x8) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) (async) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2ab, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000008c0)='sys_enter\x00', r3}, 0x10) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) inotify_init() (async) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) (async) inotify_add_watch(r4, &(0x7f0000000240)='./file0\x00', 0x8c7) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)='J', 0x1}], 0x1) (async) 40.292069ms ago: executing program 4 (id=1387): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket(0x2, 0x2, 0x1) bind$unix(r0, &(0x7f0000000000)=@abs, 0x6e) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') read$ptp(r1, &(0x7f00000000c0)=""/7, 0x7) socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001b00)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) 39.63497ms ago: executing program 2 (id=1388): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x8000000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x2d8, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev, [], [], 'batadv0\x00', 'wg1\x00', {}, {0xff}, 0x6, 0x0, 0x5}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x4c00}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x3, 0x3ff, 0xffffffff, 0x1, 'pptp\x00', 'syz1\x00', {0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1400}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x4}]}}}]}, 0x44}}, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mlock(&(0x7f000069f000/0x2000)=nil, 0x2000) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000001fc0)=[{}], 0x1, 0x0, 0x0, 0x2, 0x0, 0x2}) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r6 = dup(r4) write$P9_RLERRORu(r6, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r6, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) 17.85126ms ago: executing program 2 (id=1389): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file2\x00', 0xc0ed0040, &(0x7f00000005c0)={[{@noblock_validity}, {@resuid}, {@data_err_abort}, {@noload}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@lazytime}]}, 0xfe, 0x472, &(0x7f0000000940)="$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") syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @random="b0c942034375", @void, {@ipv4={0x8864, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x22, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) r0 = open(&(0x7f0000000480)='.\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x18, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_io_uring_setup(0x24f9, &(0x7f0000000180)={0x0, 0x0, 0x10100, 0x0, 0x1000000}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000000c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000600)={r5, &(0x7f0000000080), &(0x7f0000000200)=""/153}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000500)=ANY=[@ANYBLOB="000000004c9002e3ff0000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) 0s ago: executing program 4 (id=1390): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000880)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @random="e4b771d8d181", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0xfffd, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0xe, 0x9}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_emit_ethernet(0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): ype=1400 audit(1733399060.536:2235): avc: denied { associate } for pid=6978 comm="syz.5.943" name="file0" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=DC [ 193.861806][ T29] audit: type=1400 audit(1733399060.546:2236): avc: denied { name_bind } for pid=6978 comm="syz.5.943" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 193.869753][ T6983] loop3: detected capacity change from 0 to 512 [ 193.882891][ T29] audit: type=1400 audit(1733399060.546:2237): avc: denied { node_bind } for pid=6978 comm="syz.5.943" saddr=::1 src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 193.893277][ T6983] EXT4-fs (loop3): blocks per group (71) and clusters per group (20800) inconsistent [ 193.910393][ T6966] support for cryptoloop has been removed. Use dm-crypt instead. [ 193.938118][ T6983] loop3: detected capacity change from 0 to 512 [ 193.951399][ T6983] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.944: corrupted in-inode xattr: invalid ea_ino [ 193.968387][ T6983] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.944: couldn't read orphan inode 15 (err -117) [ 193.981077][ T6983] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.039900][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.086787][ T6995] loop5: detected capacity change from 0 to 128 [ 194.095237][ T6991] 9pnet_fd: Insufficient options for proto=fd [ 194.096282][ T6994] loop4: detected capacity change from 0 to 512 [ 194.138313][ T6994] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.175322][ T6994] ext4 filesystem being mounted at /187/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.197092][ T6995] syz.5.948: attempt to access beyond end of device [ 194.197092][ T6995] loop5: rw=2049, sector=145, nr_sectors = 3 limit=128 [ 194.235051][ T6995] syz.5.948: attempt to access beyond end of device [ 194.235051][ T6995] loop5: rw=2049, sector=148, nr_sectors = 1 limit=128 [ 194.248537][ T6995] Buffer I/O error on dev loop5, logical block 148, lost async page write [ 194.257188][ T6995] syz.5.948: attempt to access beyond end of device [ 194.257188][ T6995] loop5: rw=2049, sector=149, nr_sectors = 1 limit=128 [ 194.270531][ T6995] Buffer I/O error on dev loop5, logical block 149, lost async page write [ 194.279124][ T6995] syz.5.948: attempt to access beyond end of device [ 194.279124][ T6995] loop5: rw=2049, sector=150, nr_sectors = 1 limit=128 [ 194.292620][ T6995] Buffer I/O error on dev loop5, logical block 150, lost async page write [ 194.302378][ T6995] syz.5.948: attempt to access beyond end of device [ 194.302378][ T6995] loop5: rw=2049, sector=151, nr_sectors = 1 limit=128 [ 194.315770][ T6995] Buffer I/O error on dev loop5, logical block 151, lost async page write [ 194.316050][ T6994] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.324421][ T6995] syz.5.948: attempt to access beyond end of device [ 194.324421][ T6995] loop5: rw=2049, sector=152, nr_sectors = 1 limit=128 [ 194.346701][ T6995] Buffer I/O error on dev loop5, logical block 152, lost async page write [ 194.359682][ T6995] syz.5.948: attempt to access beyond end of device [ 194.359682][ T6995] loop5: rw=2049, sector=153, nr_sectors = 80 limit=128 [ 194.430469][ T11] kworker/u8:0: attempt to access beyond end of device [ 194.430469][ T11] loop5: rw=1, sector=233, nr_sectors = 808 limit=128 [ 194.451371][ T7001] loop4: detected capacity change from 0 to 1024 [ 194.667960][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.823133][ T7010] 9pnet_fd: Insufficient options for proto=fd [ 195.049503][ T7012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.093120][ T7012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.126192][ T7012] netlink: 'syz.3.952': attribute type 27 has an invalid length. [ 195.591618][ T7014] loop4: detected capacity change from 0 to 512 [ 195.600827][ T7020] loop1: detected capacity change from 0 to 128 [ 195.607483][ T7014] EXT4-fs: Ignoring removed mblk_io_submit option [ 195.622292][ T7020] EXT4-fs: Ignoring removed nomblk_io_submit option [ 195.682262][ T7022] loop3: detected capacity change from 0 to 1024 [ 195.929579][ T7014] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.077900][ T7020] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 196.107630][ T7020] ext4 filesystem being mounted at /202/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 196.514115][ T7028] loop3: detected capacity change from 0 to 512 [ 196.521003][ T7028] EXT4-fs: Ignoring removed mblk_io_submit option [ 196.590863][ T7028] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.745894][ T7028] support for cryptoloop has been removed. Use dm-crypt instead. [ 196.755066][ T7014] support for cryptoloop has been removed. Use dm-crypt instead. [ 196.889294][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.022052][ T7034] loop2: detected capacity change from 0 to 128 [ 197.064438][ T7042] loop2: detected capacity change from 0 to 128 [ 197.103130][ T8] hid-generic 0006:0008:0003.0022: unknown main item tag 0xd [ 197.110736][ T8] hid-generic 0006:0008:0003.0022: unknown main item tag 0x7 [ 197.119004][ T8] hid-generic 0006:0008:0003.0022: unknown main item tag 0x7 [ 197.126454][ T8] hid-generic 0006:0008:0003.0022: item fetching failed at offset 36/212 [ 197.136480][ T8] hid-generic 0006:0008:0003.0022: probe with driver hid-generic failed with error -22 [ 197.148017][ T7043] syz.2.960: attempt to access beyond end of device [ 197.148017][ T7043] loop2: rw=2049, sector=145, nr_sectors = 3 limit=128 [ 197.179620][ T7043] syz.2.960: attempt to access beyond end of device [ 197.179620][ T7043] loop2: rw=2049, sector=148, nr_sectors = 1 limit=128 [ 197.185075][ T7039] vhci_hcd: invalid port number 66 [ 197.193009][ T7043] Buffer I/O error on dev loop2, logical block 148, lost async page write [ 197.198146][ T7039] vhci_hcd: invalid port number 66 [ 197.217260][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.219064][ T7039] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 197.243767][ T7043] Buffer I/O error on dev loop2, logical block 149, lost async page write [ 197.303117][ T7043] Buffer I/O error on dev loop2, logical block 150, lost async page write [ 197.306422][ T3297] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 197.318280][ T7043] Buffer I/O error on dev loop2, logical block 151, lost async page write [ 197.343729][ T7043] Buffer I/O error on dev loop2, logical block 152, lost async page write [ 197.413849][ T7059] netlink: 36 bytes leftover after parsing attributes in process `syz.1.963'. [ 197.422827][ T7059] netlink: 36 bytes leftover after parsing attributes in process `syz.1.963'. [ 197.454346][ T7059] netlink: 36 bytes leftover after parsing attributes in process `syz.1.963'. [ 197.478313][ T7059] netlink: 36 bytes leftover after parsing attributes in process `syz.1.963'. [ 197.487278][ T7059] netlink: 36 bytes leftover after parsing attributes in process `syz.1.963'. [ 197.514389][ T7059] netlink: 36 bytes leftover after parsing attributes in process `syz.1.963'. [ 197.535519][ T7059] netlink: 36 bytes leftover after parsing attributes in process `syz.1.963'. [ 197.544529][ T7059] netlink: 36 bytes leftover after parsing attributes in process `syz.1.963'. [ 197.570547][ T7059] netlink: 36 bytes leftover after parsing attributes in process `syz.1.963'. [ 197.672812][ T7084] loop1: detected capacity change from 0 to 512 [ 197.693517][ T7084] EXT4-fs (loop1): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 197.722298][ T3297] EXT4-fs (loop1): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 197.782101][ T7091] netlink: 256 bytes leftover after parsing attributes in process `syz.1.970'. [ 197.911935][ T7100] netlink: 'syz.2.973': attribute type 13 has an invalid length. [ 197.936587][ T7100] gretap0: refused to change device tx_queue_len [ 197.956851][ T7100] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 198.103842][ T7102] loop2: detected capacity change from 0 to 2048 [ 198.118647][ T7096] loop1: detected capacity change from 0 to 512 [ 198.132590][ T7096] EXT4-fs: Ignoring removed mblk_io_submit option [ 198.151151][ T7096] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.167322][ T7102] loop2: p1 < > p4 < > [ 198.216119][ T7096] support for cryptoloop has been removed. Use dm-crypt instead. [ 198.233681][ T2999] udevd[2999]: worker [4002] terminated by signal 33 (Unknown signal 33) [ 198.281707][ T2999] udevd[2999]: worker [4002] failed while handling '/devices/virtual/block/loop2/loop2p4' [ 198.327083][ T3653] udevd[3653]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 198.330552][ T4001] udevd[4001]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 198.439567][ T7111] bridge_slave_0: left allmulticast mode [ 198.445254][ T7111] bridge_slave_0: left promiscuous mode [ 198.451046][ T7111] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.508533][ T7111] bridge_slave_1: left allmulticast mode [ 198.514227][ T7111] bridge_slave_1: left promiscuous mode [ 198.519997][ T7111] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.551617][ T7111] bond0: (slave bond_slave_0): Releasing backup interface [ 198.566984][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.592426][ T7111] bond0: (slave bond_slave_1): Releasing backup interface [ 198.632317][ T7111] team0: Port device team_slave_0 removed [ 198.642121][ T7118] loop1: detected capacity change from 0 to 128 [ 198.658491][ T7111] team0: Port device team_slave_1 removed [ 198.939116][ T29] kauditd_printk_skb: 224 callbacks suppressed [ 198.939134][ T29] audit: type=1326 audit(1733399065.736:2462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7127 comm="syz.3.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98f653ff19 code=0x7ffc0000 [ 199.036644][ T29] audit: type=1326 audit(1733399065.826:2463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7127 comm="syz.3.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98f653ff19 code=0x7ffc0000 [ 199.060028][ T29] audit: type=1326 audit(1733399065.826:2464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7127 comm="syz.3.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f98f653ff19 code=0x7ffc0000 [ 199.083511][ T29] audit: type=1326 audit(1733399065.826:2465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7127 comm="syz.3.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98f653ff19 code=0x7ffc0000 [ 199.107065][ T29] audit: type=1326 audit(1733399065.826:2466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7127 comm="syz.3.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98f653ff19 code=0x7ffc0000 [ 199.130580][ T29] audit: type=1326 audit(1733399065.826:2467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7127 comm="syz.3.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f98f653ff19 code=0x7ffc0000 [ 199.140478][ T7139] loop2: detected capacity change from 0 to 512 [ 199.153975][ T29] audit: type=1326 audit(1733399065.826:2468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7127 comm="syz.3.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98f653ff19 code=0x7ffc0000 [ 199.160583][ T7139] EXT4-fs: Ignoring removed mblk_io_submit option [ 199.183615][ T29] audit: type=1326 audit(1733399065.826:2469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7127 comm="syz.3.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98f653ff19 code=0x7ffc0000 [ 199.213499][ T29] audit: type=1326 audit(1733399065.826:2470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7127 comm="syz.3.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7f98f653ff19 code=0x7ffc0000 [ 199.215024][ T7139] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.236897][ T29] audit: type=1326 audit(1733399065.826:2471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7127 comm="syz.3.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98f653ff19 code=0x7ffc0000 [ 199.299860][ T7134] Illegal XDP return value 4294967262 on prog (id 725) dev N/A, expect packet loss! [ 199.313248][ T7141] loop1: detected capacity change from 0 to 512 [ 199.325986][ T7136] support for cryptoloop has been removed. Use dm-crypt instead. [ 199.369588][ T7141] EXT4-fs: Ignoring removed mblk_io_submit option [ 199.486742][ T7141] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.705946][ T7141] support for cryptoloop has been removed. Use dm-crypt instead. [ 199.757164][ T7149] loop4: detected capacity change from 0 to 512 [ 199.766343][ T7149] EXT4-fs: Ignoring removed mblk_io_submit option [ 199.777523][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.802161][ T7156] FAULT_INJECTION: forcing a failure. [ 199.802161][ T7156] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 199.815476][ T7156] CPU: 1 UID: 0 PID: 7156 Comm: syz.5.992 Tainted: G W 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 199.827018][ T7149] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.827619][ T7156] Tainted: [W]=WARN [ 199.843442][ T7156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 199.853553][ T7156] Call Trace: [ 199.856928][ T7156] [ 199.859941][ T7156] dump_stack_lvl+0xf2/0x150 [ 199.864609][ T7156] dump_stack+0x15/0x1a [ 199.868928][ T7156] should_fail_ex+0x223/0x230 [ 199.873697][ T7156] should_fail+0xb/0x10 [ 199.877947][ T7156] should_fail_usercopy+0x1a/0x20 [ 199.883138][ T7156] _copy_from_user+0x1e/0xb0 [ 199.887748][ T7156] move_addr_to_kernel+0x82/0x120 [ 199.892796][ T7156] __sys_bind+0x9e/0x190 [ 199.897067][ T7156] __x64_sys_bind+0x41/0x50 [ 199.901629][ T7156] x64_sys_call+0x20ab/0x2dc0 [ 199.906389][ T7156] do_syscall_64+0xc9/0x1c0 [ 199.910934][ T7156] ? clear_bhb_loop+0x55/0xb0 [ 199.915761][ T7156] ? clear_bhb_loop+0x55/0xb0 [ 199.920459][ T7156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.926397][ T7156] RIP: 0033:0x7f25670eff19 [ 199.930877][ T7156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.950609][ T7156] RSP: 002b:00007f2565767058 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 199.959031][ T7156] RAX: ffffffffffffffda RBX: 00007f25672b5fa0 RCX: 00007f25670eff19 [ 199.967029][ T7156] RDX: 000000000000006e RSI: 00000000200000c0 RDI: 0000000000000003 [ 199.975067][ T7156] RBP: 00007f25657670a0 R08: 0000000000000000 R09: 0000000000000000 [ 199.983047][ T7156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.991047][ T7156] R13: 0000000000000000 R14: 00007f25672b5fa0 R15: 00007ffe10c38808 [ 199.999029][ T7156] [ 200.188137][ T7170] loop2: detected capacity change from 0 to 128 [ 200.209201][ T7170] bio_check_eod: 14 callbacks suppressed [ 200.209247][ T7170] syz.2.996: attempt to access beyond end of device [ 200.209247][ T7170] loop2: rw=2049, sector=145, nr_sectors = 3 limit=128 [ 200.215910][ T7149] support for cryptoloop has been removed. Use dm-crypt instead. [ 200.241506][ T7170] syz.2.996: attempt to access beyond end of device [ 200.241506][ T7170] loop2: rw=2049, sector=148, nr_sectors = 1 limit=128 [ 200.254876][ T7170] buffer_io_error: 5 callbacks suppressed [ 200.254892][ T7170] Buffer I/O error on dev loop2, logical block 148, lost async page write [ 200.269346][ T7170] syz.2.996: attempt to access beyond end of device [ 200.269346][ T7170] loop2: rw=2049, sector=149, nr_sectors = 1 limit=128 [ 200.282783][ T7170] Buffer I/O error on dev loop2, logical block 149, lost async page write [ 200.291499][ T7170] syz.2.996: attempt to access beyond end of device [ 200.291499][ T7170] loop2: rw=2049, sector=150, nr_sectors = 1 limit=128 [ 200.305191][ T7170] Buffer I/O error on dev loop2, logical block 150, lost async page write [ 200.316916][ T7170] syz.2.996: attempt to access beyond end of device [ 200.316916][ T7170] loop2: rw=2049, sector=151, nr_sectors = 1 limit=128 [ 200.330331][ T7170] Buffer I/O error on dev loop2, logical block 151, lost async page write [ 200.338947][ T7170] syz.2.996: attempt to access beyond end of device [ 200.338947][ T7170] loop2: rw=2049, sector=152, nr_sectors = 1 limit=128 [ 200.352323][ T7170] Buffer I/O error on dev loop2, logical block 152, lost async page write [ 200.361423][ T7170] syz.2.996: attempt to access beyond end of device [ 200.361423][ T7170] loop2: rw=2049, sector=153, nr_sectors = 80 limit=128 [ 200.417762][ T28] kworker/u8:1: attempt to access beyond end of device [ 200.417762][ T28] loop2: rw=1, sector=233, nr_sectors = 808 limit=128 [ 200.452035][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.533360][ T7175] loop4: detected capacity change from 0 to 128 [ 201.681211][ T7194] loop4: detected capacity change from 0 to 128 [ 201.896725][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.438633][ T7221] loop3: detected capacity change from 0 to 128 [ 202.887001][ T7221] syz.3.1014: attempt to access beyond end of device [ 202.887001][ T7221] loop3: rw=2049, sector=145, nr_sectors = 3 limit=128 [ 203.037833][ T7221] syz.3.1014: attempt to access beyond end of device [ 203.037833][ T7221] loop3: rw=2049, sector=148, nr_sectors = 1 limit=128 [ 203.051340][ T7221] Buffer I/O error on dev loop3, logical block 148, lost async page write [ 203.070238][ T7232] SELinux: policydb version 1944042232 does not match my version range 15-33 [ 203.110494][ T7232] SELinux: failed to load policy [ 203.169894][ T7221] Buffer I/O error on dev loop3, logical block 149, lost async page write [ 203.178595][ T7221] Buffer I/O error on dev loop3, logical block 150, lost async page write [ 203.187364][ T7221] Buffer I/O error on dev loop3, logical block 151, lost async page write [ 203.195971][ T7221] Buffer I/O error on dev loop3, logical block 152, lost async page write [ 203.709733][ T7245] loop3: detected capacity change from 0 to 1024 [ 203.775069][ T7245] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.1021: Failed to acquire dquot type 0 [ 203.790672][ T7248] loop4: detected capacity change from 0 to 512 [ 203.797473][ T7248] EXT4-fs: Ignoring removed mblk_io_submit option [ 203.807540][ T7248] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.856086][ T7248] support for cryptoloop has been removed. Use dm-crypt instead. [ 203.918591][ T7245] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 204.005939][ T7245] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #13: comm syz.3.1021: corrupted inode contents [ 204.026267][ T7245] EXT4-fs error (device loop3): ext4_dirty_inode:6041: inode #13: comm syz.3.1021: mark_inode_dirty error [ 204.046251][ T7245] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #13: comm syz.3.1021: corrupted inode contents [ 204.066225][ T7245] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #13: comm syz.3.1021: mark_inode_dirty error [ 204.086337][ T7245] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #13: comm syz.3.1021: corrupted inode contents [ 204.102436][ T7245] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 204.116053][ T7245] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #13: comm syz.3.1021: corrupted inode contents [ 204.179428][ T7245] EXT4-fs error (device loop3): ext4_truncate:4240: inode #13: comm syz.3.1021: mark_inode_dirty error [ 204.223226][ T7245] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 204.264006][ T7245] EXT4-fs (loop3): 1 truncate cleaned up [ 204.288732][ T7245] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.339950][ T29] kauditd_printk_skb: 133 callbacks suppressed [ 204.339973][ T29] audit: type=1400 audit(1733399071.136:2603): avc: denied { lock } for pid=7244 comm="syz.3.1021" path="/207/file0/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 204.376128][ T7245] Quota error (device loop3): do_check_range: Getting block 64 out of range 1-5 [ 204.385276][ T7245] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 204.394764][ T7245] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.1021: Failed to acquire dquot type 0 [ 204.549733][ T7255] loop5: detected capacity change from 0 to 512 [ 204.557306][ T7255] EXT4-fs (loop5): blocks per group (71) and clusters per group (20800) inconsistent [ 204.635930][ T29] audit: type=1326 audit(1733399071.426:2604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7244 comm="syz.3.1021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98f653ff19 code=0x7ffc0000 [ 204.659461][ T29] audit: type=1326 audit(1733399071.426:2605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7244 comm="syz.3.1021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f98f653ff19 code=0x7ffc0000 [ 204.682865][ T29] audit: type=1326 audit(1733399071.426:2606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7244 comm="syz.3.1021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98f653ff19 code=0x7ffc0000 [ 204.840646][ T7258] loop1: detected capacity change from 0 to 512 [ 204.856799][ T7258] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 204.905835][ T7258] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.1024: bad orphan inode 131083 [ 204.960182][ T7255] loop5: detected capacity change from 0 to 512 [ 205.052870][ T7258] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.069524][ T29] audit: type=1326 audit(1733399071.866:2607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7256 comm="syz.1.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e2af3ff19 code=0x7ffc0000 [ 205.099655][ T29] audit: type=1326 audit(1733399071.886:2608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7256 comm="syz.1.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e2af3ff19 code=0x7ffc0000 [ 205.123142][ T29] audit: type=1326 audit(1733399071.886:2609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7256 comm="syz.1.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f5e2af3ff19 code=0x7ffc0000 [ 205.146536][ T29] audit: type=1326 audit(1733399071.886:2610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7256 comm="syz.1.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e2af3ff19 code=0x7ffc0000 [ 205.177465][ T7257] netlink: 'syz.1.1024': attribute type 1 has an invalid length. [ 205.196854][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.216823][ T7255] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.1023: corrupted in-inode xattr: invalid ea_ino [ 205.230425][ T7255] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.1023: couldn't read orphan inode 15 (err -117) [ 205.270898][ T7258] __nla_validate_parse: 3 callbacks suppressed [ 205.270916][ T7258] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1024'. [ 205.292030][ T7255] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.314022][ T7258] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.329329][ T7258] bond1: (slave batadv0): Enslaving as a backup interface with an up link [ 205.399530][ T7263] loop3: detected capacity change from 0 to 512 [ 205.417845][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.430361][ T5206] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.453949][ T7257] bond1 (unregistering): (slave batadv0): Releasing backup interface [ 205.471418][ T7263] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 205.508486][ T7257] bond1 (unregistering): Released all slaves [ 205.603950][ T3302] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 205.681946][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.719816][ T7271] loop3: detected capacity change from 0 to 512 [ 205.726910][ T7268] loop5: detected capacity change from 0 to 8192 [ 205.733941][ T7268] vfat: Unknown parameter 'ÿÿÿÿ00000000000000000009' [ 205.753564][ T7271] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 205.825775][ T7271] EXT4-fs (loop3): 1 truncate cleaned up [ 205.832060][ T7271] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.839256][ T7278] loop1: detected capacity change from 0 to 2048 [ 205.901314][ T7278] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.916939][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.928265][ T7290] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1033'. [ 206.030392][ T7292] loop3: detected capacity change from 0 to 128 [ 206.040565][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.081143][ T7296] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1035'. [ 206.111437][ T7296] hsr_slave_1 (unregistering): left promiscuous mode [ 206.173105][ T7302] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1038'. [ 206.201582][ T7304] rdma_rxe: rxe_newlink: failed to add bond0 [ 206.223684][ T8] hid (null): unknown global tag 0x11 [ 206.235554][ T8] hid-generic 0005:0007:0005.0023: ignoring exceeding usage max [ 206.248722][ T7304] 9pnet: Could not find request transport: f [ 206.267271][ T8] hid-generic 0005:0007:0005.0023: unexpected long global item [ 206.283846][ T8] hid-generic 0005:0007:0005.0023: probe with driver hid-generic failed with error -22 [ 206.345692][ T7309] loop1: detected capacity change from 0 to 2048 [ 206.376461][ T7309] loop1: p1 < > p4 < > [ 206.388201][ T2999] loop1: p1 < > p4 < > [ 206.438342][ T4001] udevd[4001]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 206.459494][ T3653] udevd[3653]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 206.484524][ T4001] udevd[4001]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 206.503631][ T3653] udevd[3653]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 206.558506][ T7324] loop4: detected capacity change from 0 to 128 [ 207.023721][ T7343] rdma_rxe: rxe_newlink: failed to add bond0 [ 207.047214][ T3376] hid (null): unknown global tag 0x11 [ 207.060441][ T3376] hid-generic 0005:0007:0005.0024: ignoring exceeding usage max [ 207.075988][ T7346] SELinux: policydb version 1944042232 does not match my version range 15-33 [ 207.087246][ T7343] 9pnet: Could not find request transport: f [ 207.104051][ T7346] SELinux: failed to load policy [ 207.110113][ T3376] hid-generic 0005:0007:0005.0024: unexpected long global item [ 207.128628][ T3376] hid-generic 0005:0007:0005.0024: probe with driver hid-generic failed with error -22 [ 207.828243][ T7358] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1054'. [ 207.955033][ T7364] loop1: detected capacity change from 0 to 2048 [ 208.031721][ T7364] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1056'. [ 208.052346][ T7364] atomic_op ffff888118e4e528 conn xmit_atomic 0000000000000000 [ 208.071077][ T7369] loop2: detected capacity change from 0 to 512 [ 208.133931][ T7369] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.157129][ T7376] loop1: detected capacity change from 0 to 512 [ 208.164392][ T7376] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 208.179743][ T7369] ext4 filesystem being mounted at /204/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.192870][ T7369] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.213732][ T7376] EXT4-fs (loop1): 1 truncate cleaned up [ 208.222208][ T7376] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.261170][ T7380] loop4: detected capacity change from 0 to 128 [ 208.284488][ T7380] bio_check_eod: 6 callbacks suppressed [ 208.284509][ T7380] syz.4.1063: attempt to access beyond end of device [ 208.284509][ T7380] loop4: rw=2049, sector=145, nr_sectors = 3 limit=128 [ 208.364137][ T7386] loop2: detected capacity change from 0 to 512 [ 208.377829][ T7380] syz.4.1063: attempt to access beyond end of device [ 208.377829][ T7380] loop4: rw=2049, sector=148, nr_sectors = 1 limit=128 [ 208.391406][ T7380] Buffer I/O error on dev loop4, logical block 148, lost async page write [ 208.401466][ T7385] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 208.409253][ T7385] SELinux: failed to load policy [ 208.425575][ T7380] syz.4.1063: attempt to access beyond end of device [ 208.425575][ T7380] loop4: rw=2049, sector=149, nr_sectors = 1 limit=128 [ 208.439113][ T7380] Buffer I/O error on dev loop4, logical block 149, lost async page write [ 208.451914][ T7386] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.472970][ T7380] syz.4.1063: attempt to access beyond end of device [ 208.472970][ T7380] loop4: rw=2049, sector=150, nr_sectors = 1 limit=128 [ 208.478313][ T7386] ext4 filesystem being mounted at /205/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.486492][ T7380] Buffer I/O error on dev loop4, logical block 150, lost async page write [ 208.506459][ T7391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.515272][ T7391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.522375][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.525485][ T7391] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 208.539482][ T7391] IPv6: NLM_F_CREATE should be set when creating new route [ 208.540006][ T7386] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.548728][ T7391] netlink: 'syz.5.1066': attribute type 27 has an invalid length. [ 208.563830][ T7380] syz.4.1063: attempt to access beyond end of device [ 208.563830][ T7380] loop4: rw=2049, sector=151, nr_sectors = 1 limit=128 [ 208.577443][ T7380] Buffer I/O error on dev loop4, logical block 151, lost async page write [ 208.590459][ T7380] syz.4.1063: attempt to access beyond end of device [ 208.590459][ T7380] loop4: rw=2049, sector=152, nr_sectors = 1 limit=128 [ 208.604041][ T7380] Buffer I/O error on dev loop4, logical block 152, lost async page write [ 208.619815][ T7380] syz.4.1063: attempt to access beyond end of device [ 208.619815][ T7380] loop4: rw=2049, sector=153, nr_sectors = 80 limit=128 [ 208.670603][ T7394] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1068'. [ 208.714024][ T7402] loop1: detected capacity change from 0 to 512 [ 208.741371][ T7391] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.750370][ T7391] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.751866][ T7402] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.759397][ T7391] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.759437][ T7391] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.790963][ T7402] ext4 filesystem being mounted at /229/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.802207][ T7402] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.850542][ T60] kworker/u8:4: attempt to access beyond end of device [ 208.850542][ T60] loop4: rw=1, sector=233, nr_sectors = 808 limit=128 [ 208.915389][ T7417] FAULT_INJECTION: forcing a failure. [ 208.915389][ T7417] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 208.928613][ T7417] CPU: 1 UID: 0 PID: 7417 Comm: syz.4.1071 Tainted: G W 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 208.940817][ T7417] Tainted: [W]=WARN [ 208.944687][ T7417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 208.954772][ T7417] Call Trace: [ 208.958064][ T7417] [ 208.961056][ T7417] dump_stack_lvl+0xf2/0x150 [ 208.965747][ T7417] dump_stack+0x15/0x1a [ 208.970006][ T7417] should_fail_ex+0x223/0x230 [ 208.974715][ T7417] should_fail+0xb/0x10 [ 208.978915][ T7417] should_fail_usercopy+0x1a/0x20 [ 208.983967][ T7417] _copy_from_user+0x1e/0xb0 [ 208.988815][ T7417] __se_sys_add_key+0x1ec/0x320 [ 208.993695][ T7417] ? fput+0x1c4/0x200 [ 208.997760][ T7417] __x64_sys_add_key+0x67/0x80 [ 209.002608][ T7417] x64_sys_call+0x2964/0x2dc0 [ 209.007302][ T7417] do_syscall_64+0xc9/0x1c0 [ 209.011865][ T7417] ? clear_bhb_loop+0x55/0xb0 [ 209.016553][ T7417] ? clear_bhb_loop+0x55/0xb0 [ 209.021249][ T7417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.027226][ T7417] RIP: 0033:0x7f89d67fff19 [ 209.031662][ T7417] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 209.051480][ T7417] RSP: 002b:00007f89d4e77058 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 209.060085][ T7417] RAX: ffffffffffffffda RBX: 00007f89d69c5fa0 RCX: 00007f89d67fff19 [ 209.068062][ T7417] RDX: 0000000020000340 RSI: 0000000000000000 RDI: 0000000020000040 [ 209.076207][ T7417] RBP: 00007f89d4e770a0 R08: 0000000009ac91d6 R09: 0000000000000000 [ 209.084264][ T7417] R10: 000000000000001b R11: 0000000000000246 R12: 0000000000000001 [ 209.092380][ T7417] R13: 0000000000000000 R14: 00007f89d69c5fa0 R15: 00007ffd3bd81bd8 [ 209.100509][ T7417] [ 209.161299][ T7423] loop2: detected capacity change from 0 to 512 [ 209.194149][ T7427] loop4: detected capacity change from 0 to 128 [ 209.200196][ T7431] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1079'. [ 209.208687][ T7423] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.222077][ T7423] ext4 filesystem being mounted at /209/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 209.252924][ T7423] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.270610][ T7431] hsr_slave_1 (unregistering): left promiscuous mode [ 209.374743][ T7444] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1081'. [ 209.386027][ T7443] loop1: detected capacity change from 0 to 1024 [ 209.492814][ T7447] FAULT_INJECTION: forcing a failure. [ 209.492814][ T7447] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 209.505957][ T7447] CPU: 1 UID: 0 PID: 7447 Comm: syz.4.1085 Tainted: G W 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 209.518150][ T7447] Tainted: [W]=WARN [ 209.522104][ T7447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 209.532183][ T7447] Call Trace: [ 209.535487][ T7447] [ 209.538453][ T7447] dump_stack_lvl+0xf2/0x150 [ 209.543161][ T7447] dump_stack+0x15/0x1a [ 209.547418][ T7447] should_fail_ex+0x223/0x230 [ 209.552160][ T7447] should_fail+0xb/0x10 [ 209.556387][ T7447] should_fail_usercopy+0x1a/0x20 [ 209.561439][ T7447] _copy_from_iter+0xd5/0xd00 [ 209.566294][ T7447] ? kmalloc_reserve+0x16e/0x190 [ 209.571366][ T7447] ? __build_skb_around+0x196/0x1f0 [ 209.576645][ T7447] ? __alloc_skb+0x21f/0x310 [ 209.581340][ T7447] ? __virt_addr_valid+0x1ed/0x250 [ 209.586574][ T7447] ? __check_object_size+0x364/0x520 [ 209.591919][ T7447] netlink_sendmsg+0x460/0x6e0 [ 209.596720][ T7447] ? __pfx_netlink_sendmsg+0x10/0x10 [ 209.602107][ T7447] __sock_sendmsg+0x140/0x180 [ 209.606899][ T7447] ____sys_sendmsg+0x312/0x410 [ 209.611710][ T7447] __sys_sendmsg+0x19d/0x230 [ 209.616344][ T7447] __x64_sys_sendmsg+0x46/0x50 [ 209.621215][ T7447] x64_sys_call+0x2734/0x2dc0 [ 209.625953][ T7447] do_syscall_64+0xc9/0x1c0 [ 209.630523][ T7447] ? clear_bhb_loop+0x55/0xb0 [ 209.635296][ T7447] ? clear_bhb_loop+0x55/0xb0 [ 209.639997][ T7447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.645998][ T7447] RIP: 0033:0x7f89d67fff19 [ 209.650579][ T7447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 209.670318][ T7447] RSP: 002b:00007f89d4e77058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 209.678803][ T7447] RAX: ffffffffffffffda RBX: 00007f89d69c5fa0 RCX: 00007f89d67fff19 [ 209.686903][ T7447] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000005 [ 209.695164][ T7447] RBP: 00007f89d4e770a0 R08: 0000000000000000 R09: 0000000000000000 [ 209.703155][ T7447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.711153][ T7447] R13: 0000000000000000 R14: 00007f89d69c5fa0 R15: 00007ffd3bd81bd8 [ 209.719224][ T7447] [ 209.757815][ T29] kauditd_printk_skb: 259 callbacks suppressed [ 209.757833][ T29] audit: type=1326 audit(1733399076.556:2870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7450 comm="syz.4.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89d67fff19 code=0x7ffc0000 [ 209.763659][ T7451] loop4: detected capacity change from 0 to 1024 [ 209.765285][ T29] audit: type=1326 audit(1733399076.556:2871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7450 comm="syz.4.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f89d67fff19 code=0x7ffc0000 [ 209.794681][ T7453] loop5: detected capacity change from 0 to 256 [ 209.817457][ T29] audit: type=1326 audit(1733399076.556:2872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7450 comm="syz.4.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89d67fff19 code=0x7ffc0000 [ 209.847486][ T29] audit: type=1326 audit(1733399076.556:2873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7450 comm="syz.4.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89d67fff19 code=0x7ffc0000 [ 209.871364][ T29] audit: type=1326 audit(1733399076.556:2874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7450 comm="syz.4.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f89d67fff19 code=0x7ffc0000 [ 209.894811][ T29] audit: type=1326 audit(1733399076.556:2875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7450 comm="syz.4.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f89d67fff53 code=0x7ffc0000 [ 209.918119][ T29] audit: type=1326 audit(1733399076.556:2876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7450 comm="syz.4.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f89d67fe9cf code=0x7ffc0000 [ 209.918936][ T7456] FAULT_INJECTION: forcing a failure. [ 209.918936][ T7456] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 209.941541][ T29] audit: type=1326 audit(1733399076.556:2877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7450 comm="syz.4.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f89d67fffa7 code=0x7ffc0000 [ 209.954671][ T7456] CPU: 1 UID: 0 PID: 7456 Comm: syz.3.1087 Tainted: G W 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 209.954760][ T7456] Tainted: [W]=WARN [ 209.977983][ T29] audit: type=1326 audit(1733399076.556:2878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7450 comm="syz.4.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f89d67fe880 code=0x7ffc0000 [ 209.990083][ T7456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 209.993899][ T29] audit: type=1326 audit(1733399076.556:2879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7450 comm="syz.4.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f89d67ffb1b code=0x7ffc0000 [ 210.017236][ T7456] Call Trace: [ 210.017248][ T7456] [ 210.017307][ T7456] dump_stack_lvl+0xf2/0x150 [ 210.061682][ T7456] dump_stack+0x15/0x1a [ 210.065878][ T7456] should_fail_ex+0x223/0x230 [ 210.070652][ T7456] should_fail+0xb/0x10 [ 210.074858][ T7456] should_fail_usercopy+0x1a/0x20 [ 210.080014][ T7456] _copy_to_user+0x20/0xa0 [ 210.084461][ T7456] simple_read_from_buffer+0xa0/0x110 [ 210.089929][ T7456] proc_fail_nth_read+0xf9/0x140 [ 210.095078][ T7456] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 210.100733][ T7456] vfs_read+0x1a2/0x700 [ 210.105080][ T7456] ? __rcu_read_unlock+0x4e/0x70 [ 210.110055][ T7456] ? __fget_files+0x17c/0x1c0 [ 210.114778][ T7456] ksys_read+0xe8/0x1b0 [ 210.119067][ T7456] __x64_sys_read+0x42/0x50 [ 210.123667][ T7456] x64_sys_call+0x2874/0x2dc0 [ 210.128372][ T7456] do_syscall_64+0xc9/0x1c0 [ 210.131507][ T7451] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.132893][ T7456] ? clear_bhb_loop+0x55/0xb0 [ 210.150000][ T7456] ? clear_bhb_loop+0x55/0xb0 [ 210.154694][ T7456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.160621][ T7456] RIP: 0033:0x7f98f653e92c [ 210.165045][ T7456] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 210.184697][ T7456] RSP: 002b:00007f98f4bb7050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 210.193186][ T7456] RAX: ffffffffffffffda RBX: 00007f98f6705fa0 RCX: 00007f98f653e92c [ 210.201190][ T7456] RDX: 000000000000000f RSI: 00007f98f4bb70b0 RDI: 0000000000000007 [ 210.209199][ T7456] RBP: 00007f98f4bb70a0 R08: 0000000000000000 R09: 0000000000000000 [ 210.217179][ T7456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.225183][ T7456] R13: 0000000000000000 R14: 00007f98f6705fa0 R15: 00007ffd81485b68 [ 210.233205][ T7456] [ 210.285490][ T7453] FAT-fs (loop5): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 210.296748][ T7460] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1088'. [ 210.300723][ T7451] EXT4-fs: Cannot change quota options when quota turned on [ 210.349149][ T7463] loop1: detected capacity change from 0 to 512 [ 210.379202][ T7452] EXT4-fs: Cannot change quota options when quota turned on [ 210.395562][ T7463] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 210.429719][ T7463] EXT4-fs (loop1): 1 truncate cleaned up [ 210.435735][ T7463] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.508946][ T7467] loop2: detected capacity change from 0 to 128 [ 210.533414][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.549571][ T7476] loop2: detected capacity change from 0 to 512 [ 210.575103][ T7476] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 210.600251][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.648732][ T7476] EXT4-fs (loop2): 1 truncate cleaned up [ 210.660800][ T7476] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.674263][ T7485] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1093'. [ 210.770659][ T7488] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1096'. [ 210.801290][ T7488] FAULT_INJECTION: forcing a failure. [ 210.801290][ T7488] name failslab, interval 1, probability 0, space 0, times 0 [ 210.814047][ T7488] CPU: 1 UID: 0 PID: 7488 Comm: syz.1.1096 Tainted: G W 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 210.826403][ T7488] Tainted: [W]=WARN [ 210.830739][ T7488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 210.840859][ T7488] Call Trace: [ 210.844156][ T7488] [ 210.847097][ T7488] dump_stack_lvl+0xf2/0x150 [ 210.851862][ T7488] dump_stack+0x15/0x1a [ 210.856075][ T7488] should_fail_ex+0x223/0x230 [ 210.860777][ T7488] should_failslab+0x8f/0xb0 [ 210.865405][ T7488] kmem_cache_alloc_node_noprof+0x59/0x320 [ 210.871317][ T7488] ? __alloc_skb+0x10b/0x310 [ 210.876159][ T7488] ? security_capable+0x81/0x90 [ 210.881101][ T7488] __alloc_skb+0x10b/0x310 [ 210.885567][ T7488] netlink_ack+0xef/0x4f0 [ 210.889920][ T7488] ? avc_has_perm_noaudit+0x1cc/0x210 [ 210.895444][ T7488] netlink_rcv_skb+0x19c/0x230 [ 210.900219][ T7488] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 210.905755][ T7488] rtnetlink_rcv+0x1c/0x30 [ 210.910245][ T7488] netlink_unicast+0x599/0x670 [ 210.915018][ T7488] netlink_sendmsg+0x5cc/0x6e0 [ 210.919798][ T7488] ? __pfx_netlink_sendmsg+0x10/0x10 [ 210.925174][ T7488] __sock_sendmsg+0x140/0x180 [ 210.929881][ T7488] ____sys_sendmsg+0x312/0x410 [ 210.934770][ T7488] __sys_sendmsg+0x19d/0x230 [ 210.939470][ T7488] __x64_sys_sendmsg+0x46/0x50 [ 210.944332][ T7488] x64_sys_call+0x2734/0x2dc0 [ 210.949070][ T7488] do_syscall_64+0xc9/0x1c0 [ 210.953588][ T7488] ? clear_bhb_loop+0x55/0xb0 [ 210.958318][ T7488] ? clear_bhb_loop+0x55/0xb0 [ 210.963059][ T7488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.968980][ T7488] RIP: 0033:0x7f5e2af3ff19 [ 210.973448][ T7488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.993515][ T7488] RSP: 002b:00007f5e295b7058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 211.002008][ T7488] RAX: ffffffffffffffda RBX: 00007f5e2b105fa0 RCX: 00007f5e2af3ff19 [ 211.010079][ T7488] RDX: 0000000000000010 RSI: 0000000020000200 RDI: 0000000000000006 [ 211.018059][ T7488] RBP: 00007f5e295b70a0 R08: 0000000000000000 R09: 0000000000000000 [ 211.026099][ T7488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.034083][ T7488] R13: 0000000000000000 R14: 00007f5e2b105fa0 R15: 00007ffc50560fc8 [ 211.042070][ T7488] [ 211.112937][ T7501] loop4: detected capacity change from 0 to 512 [ 211.146658][ T7501] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 211.154637][ T7501] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 211.168917][ T7501] System zones: 0-1, 15-15, 18-18, 34-34 [ 211.174864][ T7501] EXT4-fs (loop4): orphan cleanup on readonly fs [ 211.192774][ T7501] EXT4-fs warning (device loop4): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 211.207545][ T7501] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 211.235362][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.273175][ T7513] loop2: detected capacity change from 0 to 512 [ 211.279582][ T7501] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm syz.4.1101: bad orphan inode 16 [ 211.302377][ T7513] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 211.303746][ T7515] loop1: detected capacity change from 0 to 512 [ 211.313241][ T7501] ext4_test_bit(bit=15, block=18) = 1 [ 211.324495][ T7501] is_bad_inode(inode)=0 [ 211.328698][ T7501] NEXT_ORPHAN(inode)=0 [ 211.332819][ T7501] max_ino=32 [ 211.336068][ T7501] i_nlink=2 [ 211.358831][ T7519] loop3: detected capacity change from 0 to 1024 [ 211.365734][ T7501] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 211.366371][ T7513] EXT4-fs (loop2): 1 truncate cleaned up [ 211.384359][ T7513] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.397128][ T7519] EXT4-fs: Ignoring removed nobh option [ 211.402884][ T7519] EXT4-fs: Ignoring removed i_version option [ 211.408939][ T7519] ext4: Unknown parameter 'subj_type' [ 211.411927][ T7515] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.431836][ T7515] ext4 filesystem being mounted at /237/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 211.457235][ T7501] xt_CT: No such helper "snmp_trap" [ 211.505032][ T7525] loop3: detected capacity change from 0 to 1024 [ 211.646081][ T7529] pim6reg: entered allmulticast mode [ 211.720264][ T7537] loop3: detected capacity change from 0 to 512 [ 211.727125][ T7537] EXT4-fs: Ignoring removed mblk_io_submit option [ 211.756190][ T7529] pim6reg: left allmulticast mode [ 211.765396][ T7540] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1107'. [ 212.155947][ T7537] support for cryptoloop has been removed. Use dm-crypt instead. [ 212.213553][ T7558] loop5: detected capacity change from 0 to 512 [ 212.214565][ T7560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.230162][ T7558] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 212.235908][ T7560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.260083][ T7558] EXT4-fs (loop5): 1 truncate cleaned up [ 212.273927][ T7560] netlink: 'syz.2.1119': attribute type 27 has an invalid length. [ 212.294685][ T7563] FAULT_INJECTION: forcing a failure. [ 212.294685][ T7563] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 212.307852][ T7563] CPU: 0 UID: 0 PID: 7563 Comm: syz.4.1120 Tainted: G W 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 212.320168][ T7563] Tainted: [W]=WARN [ 212.324081][ T7563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 212.334163][ T7563] Call Trace: [ 212.337441][ T7563] [ 212.340392][ T7563] dump_stack_lvl+0xf2/0x150 [ 212.345110][ T7563] dump_stack+0x15/0x1a [ 212.349348][ T7563] should_fail_ex+0x223/0x230 [ 212.354070][ T7563] should_fail+0xb/0x10 [ 212.358270][ T7563] should_fail_usercopy+0x1a/0x20 [ 212.363380][ T7563] _copy_from_user+0x1e/0xb0 [ 212.368053][ T7563] __se_sys_mount+0x119/0x2d0 [ 212.372814][ T7563] ? ksys_write+0x176/0x1b0 [ 212.377327][ T7563] __x64_sys_mount+0x67/0x80 [ 212.381997][ T7563] x64_sys_call+0x2c84/0x2dc0 [ 212.386720][ T7563] do_syscall_64+0xc9/0x1c0 [ 212.391272][ T7563] ? clear_bhb_loop+0x55/0xb0 [ 212.396059][ T7563] ? clear_bhb_loop+0x55/0xb0 [ 212.400797][ T7563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.406732][ T7563] RIP: 0033:0x7f89d67fff19 [ 212.411151][ T7563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.430830][ T7563] RSP: 002b:00007f89d4e77058 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 212.439330][ T7563] RAX: ffffffffffffffda RBX: 00007f89d69c5fa0 RCX: 00007f89d67fff19 [ 212.447324][ T7563] RDX: 00000000200002c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 212.455403][ T7563] RBP: 00007f89d4e770a0 R08: 0000000020000400 R09: 0000000000000000 [ 212.463496][ T7563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.471486][ T7563] R13: 0000000000000000 R14: 00007f89d69c5fa0 R15: 00007ffd3bd81bd8 [ 212.479519][ T7563] [ 212.744759][ T7581] netlink: 'syz.1.1126': attribute type 27 has an invalid length. [ 212.845491][ T7585] loop1: detected capacity change from 0 to 2048 [ 212.858550][ T7569] loop5: detected capacity change from 0 to 512 [ 212.879954][ T7569] EXT4-fs: Ignoring removed oldalloc option [ 212.890083][ T7569] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 212.911851][ T7569] EXT4-fs (loop5): 1 truncate cleaned up [ 212.936750][ T7585] loop1: p1 < > p4 < > [ 213.290394][ T7612] loop5: detected capacity change from 0 to 1024 [ 213.295090][ T7611] loop3: detected capacity change from 0 to 512 [ 213.308401][ T7614] loop2: detected capacity change from 0 to 1024 [ 213.351540][ T7611] EXT4-fs: Ignoring removed mblk_io_submit option [ 213.517905][ T7611] support for cryptoloop has been removed. Use dm-crypt instead. [ 213.523509][ T7621] loop5: detected capacity change from 0 to 512 [ 213.532845][ T7621] EXT4-fs: Ignoring removed mblk_io_submit option [ 213.635887][ T7621] support for cryptoloop has been removed. Use dm-crypt instead. [ 214.262494][ T7630] loop5: detected capacity change from 0 to 2048 [ 214.326453][ T7630] loop5: p1 < > p4 < > [ 214.445136][ T7634] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1140'. [ 214.576011][ T7634] hsr_slave_1 (unregistering): left promiscuous mode [ 215.180761][ T7646] loop2: detected capacity change from 0 to 512 [ 215.248379][ T7646] ext4 filesystem being mounted at /223/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.320507][ T7640] FAULT_INJECTION: forcing a failure. [ 215.320507][ T7640] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 215.333641][ T7640] CPU: 1 UID: 0 PID: 7640 Comm: syz.4.1144 Tainted: G W 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 215.345831][ T7640] Tainted: [W]=WARN [ 215.349663][ T7640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 215.359831][ T7640] Call Trace: [ 215.363163][ T7640] [ 215.366185][ T7640] dump_stack_lvl+0xf2/0x150 [ 215.370974][ T7640] dump_stack+0x15/0x1a [ 215.375172][ T7640] should_fail_ex+0x223/0x230 [ 215.379963][ T7640] should_fail+0xb/0x10 [ 215.384216][ T7640] should_fail_usercopy+0x1a/0x20 [ 215.389398][ T7640] _copy_to_user+0x20/0xa0 [ 215.394002][ T7640] simple_read_from_buffer+0xa0/0x110 [ 215.399426][ T7640] proc_fail_nth_read+0xf9/0x140 [ 215.404408][ T7640] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 215.410014][ T7640] vfs_read+0x1a2/0x700 [ 215.414203][ T7640] ? __rcu_read_unlock+0x4e/0x70 [ 215.419204][ T7640] ? __fget_files+0x17c/0x1c0 [ 215.423926][ T7640] ksys_read+0xe8/0x1b0 [ 215.428468][ T7640] __x64_sys_read+0x42/0x50 [ 215.433066][ T7640] x64_sys_call+0x2874/0x2dc0 [ 215.437802][ T7640] do_syscall_64+0xc9/0x1c0 [ 215.442326][ T7640] ? clear_bhb_loop+0x55/0xb0 [ 215.447017][ T7640] ? clear_bhb_loop+0x55/0xb0 [ 215.451764][ T7640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.457716][ T7640] RIP: 0033:0x7f89d67fe92c [ 215.462167][ T7640] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 215.481817][ T7640] RSP: 002b:00007f89d4e77050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 215.490260][ T7640] RAX: ffffffffffffffda RBX: 00007f89d69c5fa0 RCX: 00007f89d67fe92c [ 215.498262][ T7640] RDX: 000000000000000f RSI: 00007f89d4e770b0 RDI: 0000000000000006 [ 215.506262][ T7640] RBP: 00007f89d4e770a0 R08: 0000000000000000 R09: 0000000000000000 [ 215.514256][ T7640] R10: 0000000000000042 R11: 0000000000000246 R12: 0000000000000001 [ 215.522254][ T7640] R13: 0000000000000000 R14: 00007f89d69c5fa0 R15: 00007ffd3bd81bd8 [ 215.530260][ T7640] [ 215.539109][ T7653] loop5: detected capacity change from 0 to 512 [ 215.589657][ T7653] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 215.658457][ T29] kauditd_printk_skb: 168 callbacks suppressed [ 215.658475][ T29] audit: type=1400 audit(1733399082.446:3047): avc: denied { getopt } for pid=7645 comm="syz.2.1145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 215.709624][ T7653] EXT4-fs (loop5): 1 truncate cleaned up [ 215.764510][ T7660] loop4: detected capacity change from 0 to 1024 [ 215.856354][ T7666] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1147'. [ 215.878756][ T7669] FAULT_INJECTION: forcing a failure. [ 215.878756][ T7669] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 215.891919][ T7669] CPU: 0 UID: 0 PID: 7669 Comm: syz.1.1149 Tainted: G W 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 215.904107][ T7669] Tainted: [W]=WARN [ 215.907923][ T7669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 215.917989][ T7669] Call Trace: [ 215.921300][ T7669] [ 215.924235][ T7669] dump_stack_lvl+0xf2/0x150 [ 215.928908][ T7669] dump_stack+0x15/0x1a [ 215.933125][ T7669] should_fail_ex+0x223/0x230 [ 215.937851][ T7669] should_fail+0xb/0x10 [ 215.942069][ T7669] should_fail_usercopy+0x1a/0x20 [ 215.947124][ T7669] _copy_from_user+0x1e/0xb0 [ 215.951817][ T7669] __se_sys_mount+0x119/0x2d0 [ 215.956683][ T7669] ? ksys_write+0x176/0x1b0 [ 215.961222][ T7669] __x64_sys_mount+0x67/0x80 [ 215.965834][ T7669] x64_sys_call+0x2c84/0x2dc0 [ 215.970521][ T7669] do_syscall_64+0xc9/0x1c0 [ 215.975048][ T7669] ? clear_bhb_loop+0x55/0xb0 [ 215.979742][ T7669] ? clear_bhb_loop+0x55/0xb0 [ 215.984457][ T7669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.990376][ T7669] RIP: 0033:0x7f5e2af3ff19 [ 215.994869][ T7669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.014513][ T7669] RSP: 002b:00007f5e295b7058 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 216.023046][ T7669] RAX: ffffffffffffffda RBX: 00007f5e2b105fa0 RCX: 00007f5e2af3ff19 [ 216.031128][ T7669] RDX: 00000000200002c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 216.039158][ T7669] RBP: 00007f5e295b70a0 R08: 0000000020000400 R09: 0000000000000000 [ 216.047233][ T7669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.055323][ T7669] R13: 0000000000000000 R14: 00007f5e2b105fa0 R15: 00007ffc50560fc8 [ 216.063316][ T7669] [ 216.087315][ T7658] tipc: Started in network mode [ 216.088162][ T7671] loop5: detected capacity change from 0 to 512 [ 216.092294][ T7658] tipc: Node identity 7f000001, cluster identity 4711 [ 216.105893][ T7658] tipc: Enabled bearer , priority 10 [ 216.263171][ T7675] loop4: detected capacity change from 0 to 512 [ 216.269851][ T7675] EXT4-fs: Ignoring removed mblk_io_submit option [ 216.285930][ T7671] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 217.099991][ T3376] tipc: Node number set to 2130706433 [ 217.124232][ T7671] EXT4-fs (loop5): 1 truncate cleaned up [ 217.144731][ T7671] FAULT_INJECTION: forcing a failure. [ 217.144731][ T7671] name failslab, interval 1, probability 0, space 0, times 0 [ 217.157449][ T7671] CPU: 1 UID: 0 PID: 7671 Comm: syz.5.1150 Tainted: G W 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 217.169650][ T7671] Tainted: [W]=WARN [ 217.173535][ T7671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 217.183614][ T7671] Call Trace: [ 217.186921][ T7671] [ 217.189890][ T7671] dump_stack_lvl+0xf2/0x150 [ 217.194510][ T7671] dump_stack+0x15/0x1a [ 217.198700][ T7671] should_fail_ex+0x223/0x230 [ 217.203391][ T7671] ? ext4_expand_extra_isize_ea+0x780/0xf70 [ 217.209378][ T7671] should_failslab+0x8f/0xb0 [ 217.214036][ T7671] __kmalloc_cache_noprof+0x4e/0x320 [ 217.219336][ T7671] ext4_expand_extra_isize_ea+0x780/0xf70 [ 217.225170][ T7671] __ext4_expand_extra_isize+0x243/0x280 [ 217.230895][ T7671] __ext4_mark_inode_dirty+0x2c5/0x440 [ 217.236377][ T7671] __ext4_unlink+0x482/0x660 [ 217.240981][ T7671] ext4_unlink+0xd6/0x2a0 [ 217.245318][ T7671] vfs_unlink+0x275/0x430 [ 217.249672][ T7671] do_unlinkat+0x237/0x4d0 [ 217.254108][ T7671] __x64_sys_unlink+0x2e/0x40 [ 217.258818][ T7671] x64_sys_call+0x2329/0x2dc0 [ 217.263523][ T7671] do_syscall_64+0xc9/0x1c0 [ 217.268037][ T7671] ? clear_bhb_loop+0x55/0xb0 [ 217.272755][ T7671] ? clear_bhb_loop+0x55/0xb0 [ 217.277457][ T7671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.283410][ T7671] RIP: 0033:0x7f25670eff19 [ 217.287876][ T7671] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.307933][ T7671] RSP: 002b:00007f2565767058 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 217.316357][ T7671] RAX: ffffffffffffffda RBX: 00007f25672b5fa0 RCX: 00007f25670eff19 [ 217.324340][ T7671] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 217.332334][ T7671] RBP: 00007f25657670a0 R08: 0000000000000000 R09: 0000000000000000 [ 217.340312][ T7671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.348290][ T7671] R13: 0000000000000000 R14: 00007f25672b5fa0 R15: 00007ffe10c38808 [ 217.356714][ T7671] [ 217.562252][ T7685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.588514][ T7685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.609782][ T7685] netlink: 'syz.2.1155': attribute type 27 has an invalid length. [ 217.982977][ T7660] support for cryptoloop has been removed. Use dm-crypt instead. [ 218.096352][ T29] audit: type=1400 audit(1733399084.886:3048): avc: denied { write } for pid=7691 comm="syz.4.1156" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 218.117175][ T29] audit: type=1400 audit(1733399084.886:3049): avc: denied { open } for pid=7691 comm="syz.4.1156" path="/230/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 218.202510][ T7694] loop5: detected capacity change from 0 to 512 [ 218.212945][ T7694] EXT4-fs: Ignoring removed mblk_io_submit option [ 218.247783][ T7694] EXT4-fs mount: 23 callbacks suppressed [ 218.247805][ T7694] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.269944][ T7701] 9pnet_fd: Insufficient options for proto=fd [ 218.417817][ T29] audit: type=1326 audit(1733399085.216:3050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7704 comm="syz.3.1159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98f653ff19 code=0x7ffc0000 [ 218.435871][ T7694] support for cryptoloop has been removed. Use dm-crypt instead. [ 218.441341][ T29] audit: type=1326 audit(1733399085.216:3051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7704 comm="syz.3.1159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98f653ff19 code=0x7ffc0000 [ 218.472653][ T29] audit: type=1326 audit(1733399085.216:3052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7704 comm="syz.3.1159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f98f653ff19 code=0x7ffc0000 [ 218.496217][ T29] audit: type=1326 audit(1733399085.216:3053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7704 comm="syz.3.1159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98f653ff19 code=0x7ffc0000 [ 218.519643][ T29] audit: type=1326 audit(1733399085.216:3054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7704 comm="syz.3.1159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98f653ff19 code=0x7ffc0000 [ 218.576838][ T29] audit: type=1326 audit(1733399085.296:3055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7704 comm="syz.3.1159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f98f653ff19 code=0x7ffc0000 [ 218.600593][ T29] audit: type=1326 audit(1733399085.296:3056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7704 comm="syz.3.1159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98f653ff19 code=0x7ffc0000 [ 218.687481][ T7709] 9pnet_fd: Insufficient options for proto=fd [ 218.723095][ T7712] 9pnet_fd: Insufficient options for proto=fd [ 219.175198][ T7714] loop2: detected capacity change from 0 to 512 [ 219.218648][ T7714] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.255972][ T7714] ext4 filesystem being mounted at /228/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.276672][ T7714] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.407935][ T7718] loop2: detected capacity change from 0 to 512 [ 219.436658][ T5206] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.577557][ T7718] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.590790][ T7718] ext4 filesystem being mounted at /229/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.626666][ T7718] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.638737][ T7732] loop5: detected capacity change from 0 to 512 [ 219.676664][ T7732] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 219.684636][ T7732] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 219.703000][ T7732] System zones: 0-1, 15-15, 18-18, 34-34 [ 219.716762][ T7732] EXT4-fs (loop5): orphan cleanup on readonly fs [ 219.732254][ T7732] EXT4-fs warning (device loop5): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 219.746871][ T7732] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 219.753868][ T7732] EXT4-fs error (device loop5): ext4_orphan_get:1415: comm syz.5.1164: bad orphan inode 16 [ 219.764576][ T7732] ext4_test_bit(bit=15, block=18) = 1 [ 219.770112][ T7732] is_bad_inode(inode)=0 [ 219.774291][ T7732] NEXT_ORPHAN(inode)=0 [ 219.778452][ T7732] max_ino=32 [ 219.781653][ T7732] i_nlink=2 [ 219.785969][ T7732] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 219.877873][ T5206] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.998118][ T7743] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1167'. [ 220.019183][ T7746] loop2: detected capacity change from 0 to 1024 [ 220.160342][ T7742] loop5: detected capacity change from 0 to 512 [ 220.166980][ T7742] EXT4-fs: Ignoring removed mblk_io_submit option [ 220.185263][ T7742] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.235928][ T7742] support for cryptoloop has been removed. Use dm-crypt instead. [ 220.304897][ T7754] loop2: detected capacity change from 0 to 512 [ 220.343909][ T7754] EXT4-fs: Ignoring removed mblk_io_submit option [ 220.391536][ T7754] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.417545][ T7763] loop3: detected capacity change from 0 to 512 [ 220.445005][ T7763] EXT4-fs: Ignoring removed orlov option [ 220.458438][ T7763] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 220.476256][ T7754] support for cryptoloop has been removed. Use dm-crypt instead. [ 220.506231][ T7763] EXT4-fs (loop3): orphan cleanup on readonly fs [ 220.517665][ T7763] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.1175: Failed to acquire dquot type 1 [ 220.548739][ T7763] EXT4-fs (loop3): 1 truncate cleaned up [ 220.561966][ T5206] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.577326][ T7763] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 220.621822][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.641930][ T7768] xt_CT: No such helper "snmp_trap" [ 220.686941][ T7771] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1177'. [ 220.698269][ T7765] loop4: detected capacity change from 0 to 512 [ 220.705075][ T7765] EXT4-fs: Ignoring removed mblk_io_submit option [ 220.716939][ T7765] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.729995][ T7774] netlink: 'syz.5.1178': attribute type 10 has an invalid length. [ 220.738498][ T7774] team0: Device macvtap0 failed to register rx_handler [ 220.780065][ T7785] loop5: detected capacity change from 0 to 512 [ 220.783782][ T7782] loop3: detected capacity change from 0 to 128 [ 220.792900][ T7765] support for cryptoloop has been removed. Use dm-crypt instead. [ 220.806731][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 220.806825][ T29] audit: type=1326 audit(1733399087.596:3082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7781 comm="syz.3.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98f653ff19 code=0x7ffc0000 [ 220.836493][ T29] audit: type=1326 audit(1733399087.596:3083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7781 comm="syz.3.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98f653ff19 code=0x7ffc0000 [ 220.860160][ T29] audit: type=1326 audit(1733399087.596:3084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7781 comm="syz.3.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f98f653ff19 code=0x7ffc0000 [ 220.886867][ T29] audit: type=1326 audit(1733399087.636:3085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7781 comm="syz.3.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98f653ff19 code=0x7ffc0000 [ 220.910401][ T29] audit: type=1326 audit(1733399087.636:3086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7781 comm="syz.3.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98f653ff19 code=0x7ffc0000 [ 220.933908][ T29] audit: type=1326 audit(1733399087.686:3087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7781 comm="syz.3.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f98f653ff19 code=0x7ffc0000 [ 220.959549][ T7785] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.992498][ T29] audit: type=1326 audit(1733399087.686:3088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7781 comm="syz.3.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98f653ff19 code=0x7ffc0000 [ 221.015967][ T29] audit: type=1326 audit(1733399087.686:3089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7781 comm="syz.3.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98f653ff19 code=0x7ffc0000 [ 221.019733][ T7785] ext4 filesystem being mounted at /119/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.039451][ T29] audit: type=1326 audit(1733399087.686:3090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7781 comm="syz.3.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7f98f653ff19 code=0x7ffc0000 [ 221.039492][ T29] audit: type=1326 audit(1733399087.686:3091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7781 comm="syz.3.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98f653ff19 code=0x7ffc0000 [ 221.103468][ T7785] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.113613][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.127573][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.159052][ T7795] loop2: detected capacity change from 0 to 512 [ 221.173314][ T7795] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 221.192162][ T7795] EXT4-fs (loop2): 1 truncate cleaned up [ 221.200133][ T7795] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.205980][ T7800] syz0: rxe_newlink: already configured on bond0 [ 221.234815][ T8] hid (null): unknown global tag 0x11 [ 221.241198][ T8] hid-generic 0005:0007:0005.0025: ignoring exceeding usage max [ 221.253229][ T8] hid-generic 0005:0007:0005.0025: unexpected long global item [ 221.260970][ T8] hid-generic 0005:0007:0005.0025: probe with driver hid-generic failed with error -22 [ 221.296442][ T7802] pim6reg: entered allmulticast mode [ 221.300418][ T7804] rdma_rxe: rxe_newlink: failed to add bond0 [ 221.303731][ T7802] pim6reg: left allmulticast mode [ 221.319295][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.323391][ T8] hid (null): unknown global tag 0x11 [ 221.336072][ T7800] 9pnet: Could not find request transport: f [ 221.351843][ T8] hid-generic 0005:0007:0005.0026: ignoring exceeding usage max [ 221.370852][ T7804] 9pnet: Could not find request transport: f [ 221.384907][ T8] hid-generic 0005:0007:0005.0026: unexpected long global item [ 221.406318][ T8] hid-generic 0005:0007:0005.0026: probe with driver hid-generic failed with error -22 [ 221.458392][ T7813] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1190'. [ 221.469174][ T7820] 9pnet_fd: Insufficient options for proto=fd [ 221.864240][ T7836] FAULT_INJECTION: forcing a failure. [ 221.864240][ T7836] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 221.877435][ T7836] CPU: 1 UID: 0 PID: 7836 Comm: syz.5.1199 Tainted: G W 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 221.889637][ T7836] Tainted: [W]=WARN [ 221.893600][ T7836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 221.903861][ T7836] Call Trace: [ 221.907146][ T7836] [ 221.910079][ T7836] dump_stack_lvl+0xf2/0x150 [ 221.914777][ T7836] dump_stack+0x15/0x1a [ 221.918991][ T7836] should_fail_ex+0x223/0x230 [ 221.923685][ T7836] should_fail+0xb/0x10 [ 221.927955][ T7836] should_fail_usercopy+0x1a/0x20 [ 221.932999][ T7836] _copy_from_user+0x1e/0xb0 [ 221.937635][ T7836] move_addr_to_kernel+0x82/0x120 [ 221.942757][ T7836] __sys_sendto+0x12e/0x230 [ 221.947378][ T7836] __x64_sys_sendto+0x78/0x90 [ 221.952252][ T7836] x64_sys_call+0x29fa/0x2dc0 [ 221.956947][ T7836] do_syscall_64+0xc9/0x1c0 [ 221.961499][ T7836] ? clear_bhb_loop+0x55/0xb0 [ 221.966194][ T7836] ? clear_bhb_loop+0x55/0xb0 [ 221.970895][ T7836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.976872][ T7836] RIP: 0033:0x7f25670eff19 [ 221.981550][ T7836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.001955][ T7836] RSP: 002b:00007f2565767058 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 222.010381][ T7836] RAX: ffffffffffffffda RBX: 00007f25672b5fa0 RCX: 00007f25670eff19 [ 222.018362][ T7836] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 222.026340][ T7836] RBP: 00007f25657670a0 R08: 0000000020b63fe4 R09: 000000000000001c [ 222.034320][ T7836] R10: 000000002200c851 R11: 0000000000000246 R12: 0000000000000001 [ 222.042295][ T7836] R13: 0000000000000000 R14: 00007f25672b5fa0 R15: 00007ffe10c38808 [ 222.050295][ T7836] [ 222.084104][ T7838] rdma_rxe: rxe_newlink: failed to add bond0 [ 222.097777][ T1030] hid (null): unknown global tag 0x11 [ 222.106305][ T1030] hid-generic 0005:0007:0005.0027: ignoring exceeding usage max [ 222.119991][ T1030] hid-generic 0005:0007:0005.0027: unexpected long global item [ 222.136582][ T1030] hid-generic 0005:0007:0005.0027: probe with driver hid-generic failed with error -22 [ 222.146795][ T7838] 9pnet: Could not find request transport: f [ 222.178150][ T7841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.187160][ T7841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.198223][ T7841] netlink: 'syz.5.1201': attribute type 27 has an invalid length. [ 222.357511][ T7845] loop4: detected capacity change from 0 to 512 [ 222.383135][ T7845] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 222.395782][ T7845] EXT4-fs (loop4): 1 truncate cleaned up [ 222.410037][ T7847] loop3: detected capacity change from 0 to 512 [ 222.426644][ T7847] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 222.439400][ T7845] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.483502][ T7847] devtmpfs: Unknown parameter 'di¼CÆ5F\LÑž' [ 222.555674][ T7853] loop3: detected capacity change from 0 to 1024 [ 222.587716][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.668143][ T7850] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1205'. [ 222.899191][ T7865] loop3: detected capacity change from 0 to 512 [ 222.905902][ T7865] EXT4-fs: Ignoring removed mblk_io_submit option [ 222.932589][ T7865] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.155876][ T7865] support for cryptoloop has been removed. Use dm-crypt instead. [ 223.265750][ T7877] pim6reg: entered allmulticast mode [ 223.274400][ T7877] pim6reg: left allmulticast mode [ 223.468492][ T7883] loop2: detected capacity change from 0 to 128 [ 223.557844][ T7886] loop2: detected capacity change from 0 to 1024 [ 223.705537][ T7888] loop5: detected capacity change from 0 to 1024 [ 223.885589][ T7891] loop2: detected capacity change from 0 to 512 [ 223.896620][ T7889] loop5: detected capacity change from 0 to 512 [ 223.913557][ T7889] EXT4-fs: Ignoring removed mblk_io_submit option [ 223.920634][ T7891] EXT4-fs: Ignoring removed mblk_io_submit option [ 223.942042][ T7889] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.988391][ T7891] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.005948][ T7889] support for cryptoloop has been removed. Use dm-crypt instead. [ 224.059116][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.075727][ T7891] support for cryptoloop has been removed. Use dm-crypt instead. [ 224.175691][ T7899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.184368][ T7899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.196754][ T7899] netlink: 'syz.4.1218': attribute type 27 has an invalid length. [ 224.246815][ T7903] loop3: detected capacity change from 0 to 512 [ 224.253815][ T7903] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 224.297311][ T7903] EXT4-fs (loop3): 1 truncate cleaned up [ 224.303401][ T7903] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.341150][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.427000][ T7907] loop3: detected capacity change from 0 to 512 [ 224.433994][ T7907] EXT4-fs (loop3): blocks per group (71) and clusters per group (20800) inconsistent [ 224.447822][ T7907] loop3: detected capacity change from 0 to 512 [ 224.455786][ T7907] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.1220: corrupted in-inode xattr: invalid ea_ino [ 224.469531][ T7907] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.1220: couldn't read orphan inode 15 (err -117) [ 224.486417][ T7907] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.602907][ T5206] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.460468][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.498980][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.588882][ T7933] loop5: detected capacity change from 0 to 512 [ 225.616556][ T7933] EXT4-fs: Ignoring removed orlov option [ 225.645036][ T7933] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 225.675733][ T7933] EXT4-fs (loop5): orphan cleanup on readonly fs [ 225.697346][ T7933] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.1231: Failed to acquire dquot type 1 [ 225.756662][ T7933] EXT4-fs (loop5): 1 truncate cleaned up [ 225.763328][ T7933] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 225.816059][ T7938] loop3: detected capacity change from 0 to 512 [ 225.823046][ T7938] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 225.859843][ T7938] EXT4-fs (loop3): 1 truncate cleaned up [ 225.878598][ T7938] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.935765][ T5206] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.963897][ T7954] loop4: detected capacity change from 0 to 512 [ 226.040322][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.049882][ T7963] FAULT_INJECTION: forcing a failure. [ 226.049882][ T7963] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 226.052848][ T7954] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.062962][ T7963] CPU: 0 UID: 0 PID: 7963 Comm: syz.5.1238 Tainted: G W 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 226.087602][ T7963] Tainted: [W]=WARN [ 226.091920][ T7963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 226.102060][ T7963] Call Trace: [ 226.105360][ T7963] [ 226.108343][ T7963] dump_stack_lvl+0xf2/0x150 [ 226.112968][ T7963] dump_stack+0x15/0x1a [ 226.117249][ T7963] should_fail_ex+0x223/0x230 [ 226.121942][ T7963] should_fail+0xb/0x10 [ 226.126187][ T7963] should_fail_usercopy+0x1a/0x20 [ 226.131227][ T7963] _copy_from_user+0x1e/0xb0 [ 226.135865][ T7963] memdup_user+0x64/0xc0 [ 226.140134][ T7963] strndup_user+0x68/0xa0 [ 226.144534][ T7963] __se_sys_mount+0x4e/0x2d0 [ 226.149202][ T7963] ? fput+0x1c4/0x200 [ 226.153191][ T7963] ? ksys_write+0x176/0x1b0 [ 226.157756][ T7963] __x64_sys_mount+0x67/0x80 [ 226.162476][ T7963] x64_sys_call+0x2c84/0x2dc0 [ 226.167166][ T7963] do_syscall_64+0xc9/0x1c0 [ 226.171679][ T7963] ? clear_bhb_loop+0x55/0xb0 [ 226.176430][ T7963] ? clear_bhb_loop+0x55/0xb0 [ 226.181124][ T7963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.187112][ T7963] RIP: 0033:0x7f25670eff19 [ 226.191544][ T7963] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 226.211428][ T7963] RSP: 002b:00007f2565767058 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 226.219902][ T7963] RAX: ffffffffffffffda RBX: 00007f25672b5fa0 RCX: 00007f25670eff19 [ 226.227902][ T7963] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 226.235882][ T7963] RBP: 00007f25657670a0 R08: 0000000020000500 R09: 0000000000000000 [ 226.243860][ T7963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.251843][ T7963] R13: 0000000000000000 R14: 00007f25672b5fa0 R15: 00007ffe10c38808 [ 226.259830][ T7963] [ 226.263159][ T7954] ext4 filesystem being mounted at /246/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.300494][ T7954] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.324256][ T29] kauditd_printk_skb: 115 callbacks suppressed [ 226.324273][ T29] audit: type=1326 audit(1733399093.116:3205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7965 comm="syz.5.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25670eff19 code=0x7ffc0000 [ 226.368898][ T29] audit: type=1326 audit(1733399093.156:3206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7965 comm="syz.5.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f25670eff19 code=0x7ffc0000 [ 226.392395][ T29] audit: type=1326 audit(1733399093.156:3207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7965 comm="syz.5.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25670eff19 code=0x7ffc0000 [ 226.415945][ T29] audit: type=1326 audit(1733399093.156:3208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7965 comm="syz.5.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25670eff19 code=0x7ffc0000 [ 226.439463][ T29] audit: type=1326 audit(1733399093.156:3209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7965 comm="syz.5.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f25670eff19 code=0x7ffc0000 [ 226.464768][ T29] audit: type=1326 audit(1733399093.156:3210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7965 comm="syz.5.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25670eff19 code=0x7ffc0000 [ 226.488456][ T29] audit: type=1326 audit(1733399093.156:3211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7965 comm="syz.5.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f25670eff19 code=0x7ffc0000 [ 226.512045][ T29] audit: type=1326 audit(1733399093.156:3212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7965 comm="syz.5.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25670eff19 code=0x7ffc0000 [ 226.535550][ T29] audit: type=1326 audit(1733399093.156:3213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7965 comm="syz.5.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f25670eff19 code=0x7ffc0000 [ 226.559056][ T29] audit: type=1326 audit(1733399093.156:3214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7965 comm="syz.5.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25670eff19 code=0x7ffc0000 [ 226.567299][ T7973] loop4: detected capacity change from 0 to 512 [ 226.603303][ T7973] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 226.627717][ T7973] EXT4-fs (loop4): 1 truncate cleaned up [ 226.634807][ T7973] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.697091][ T7979] FAULT_INJECTION: forcing a failure. [ 226.697091][ T7979] name failslab, interval 1, probability 0, space 0, times 0 [ 226.709854][ T7979] CPU: 0 UID: 0 PID: 7979 Comm: syz.2.1244 Tainted: G W 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 226.716577][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.722122][ T7979] Tainted: [W]=WARN [ 226.722131][ T7979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 226.744973][ T7979] Call Trace: [ 226.748256][ T7979] [ 226.751211][ T7979] dump_stack_lvl+0xf2/0x150 [ 226.755830][ T7979] dump_stack+0x15/0x1a [ 226.760042][ T7979] should_fail_ex+0x223/0x230 [ 226.764733][ T7979] should_failslab+0x8f/0xb0 [ 226.769426][ T7979] __kmalloc_noprof+0xab/0x3f0 [ 226.774266][ T7979] ? __se_sys_memfd_create+0x230/0x5c0 [ 226.779839][ T7979] __se_sys_memfd_create+0x230/0x5c0 [ 226.785217][ T7979] __x64_sys_memfd_create+0x31/0x40 [ 226.790434][ T7979] x64_sys_call+0x2d4c/0x2dc0 [ 226.795274][ T7979] do_syscall_64+0xc9/0x1c0 [ 226.799811][ T7979] ? clear_bhb_loop+0x55/0xb0 [ 226.804613][ T7979] ? clear_bhb_loop+0x55/0xb0 [ 226.809306][ T7979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.815296][ T7979] RIP: 0033:0x7fa7e049ff19 [ 226.819731][ T7979] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 226.839375][ T7979] RSP: 002b:00007fa7deb16e38 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 226.847796][ T7979] RAX: ffffffffffffffda RBX: 0000000000000618 RCX: 00007fa7e049ff19 [ 226.855801][ T7979] RDX: 00007fa7deb16f10 RSI: 0000000000000000 RDI: 00007fa7e0514209 [ 226.863783][ T7979] RBP: 0000000020000640 R08: 00007fa7deb16bd7 R09: 00007fa7deb16e60 [ 226.871854][ T7979] R10: 000000000000000a R11: 0000000000000202 R12: 0000000020000580 [ 226.879910][ T7979] R13: 00007fa7deb16f10 R14: 00007fa7deb16ed0 R15: 0000000020000480 [ 226.887944][ T7979] [ 226.896415][ T7977] loop5: detected capacity change from 0 to 1024 [ 226.970449][ T7987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.970586][ T7987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.979519][ T7987] netlink: 'syz.2.1248': attribute type 27 has an invalid length. [ 227.023102][ T7984] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1247'. [ 227.077884][ T7994] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1250'. [ 227.103326][ T7993] loop5: detected capacity change from 0 to 512 [ 227.109971][ T7993] EXT4-fs: Ignoring removed mblk_io_submit option [ 227.137027][ T7993] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.160232][ T8003] loop4: detected capacity change from 0 to 2048 [ 227.167410][ T7998] FAULT_INJECTION: forcing a failure. [ 227.167410][ T7998] name failslab, interval 1, probability 0, space 0, times 0 [ 227.180177][ T7998] CPU: 1 UID: 0 PID: 7998 Comm: syz.1.1251 Tainted: G W 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 227.192367][ T7998] Tainted: [W]=WARN [ 227.196190][ T7998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 227.206359][ T7998] Call Trace: [ 227.209766][ T7998] [ 227.212717][ T7998] dump_stack_lvl+0xf2/0x150 [ 227.217353][ T7998] dump_stack+0x15/0x1a [ 227.221573][ T7998] should_fail_ex+0x223/0x230 [ 227.226408][ T7998] should_failslab+0x8f/0xb0 [ 227.226901][ T7993] support for cryptoloop has been removed. Use dm-crypt instead. [ 227.231083][ T7998] kmem_cache_alloc_lru_noprof+0x57/0x320 [ 227.244693][ T7998] ? alloc_inode+0x6a/0x160 [ 227.249305][ T7998] alloc_inode+0x6a/0x160 [ 227.253674][ T7998] new_inode_pseudo+0x15/0x20 [ 227.258459][ T7998] create_pipe_files+0x42/0x3b0 [ 227.263360][ T7998] __do_pipe_flags+0x46/0x190 [ 227.268164][ T7998] do_pipe2+0x64/0x130 [ 227.272257][ T7998] __x64_sys_pipe2+0x30/0x40 [ 227.276966][ T7998] x64_sys_call+0x28a6/0x2dc0 [ 227.281674][ T7998] do_syscall_64+0xc9/0x1c0 [ 227.286282][ T7998] ? clear_bhb_loop+0x55/0xb0 [ 227.291028][ T7998] ? clear_bhb_loop+0x55/0xb0 [ 227.295773][ T7998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.301869][ T7998] RIP: 0033:0x7f5e2af3ff19 [ 227.306308][ T7998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 227.326248][ T7998] RSP: 002b:00007f5e295b7058 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 227.334691][ T7998] RAX: ffffffffffffffda RBX: 00007f5e2b105fa0 RCX: 00007f5e2af3ff19 [ 227.342709][ T7998] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000020000100 [ 227.350727][ T7998] RBP: 00007f5e295b70a0 R08: 0000000000000000 R09: 0000000000000000 [ 227.358732][ T7998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.366740][ T7998] R13: 0000000000000000 R14: 00007f5e2b105fa0 R15: 00007ffc50560fc8 [ 227.374832][ T7998] [ 227.387004][ T8003] loop4: p1 < > p4 < > [ 227.406809][ T2999] loop4: p1 < > p4 < > [ 227.481827][ T4001] udevd[4001]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 227.482475][ T3653] udevd[3653]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 227.522475][ T8010] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1256'. [ 227.575197][ T8013] loop4: detected capacity change from 0 to 256 [ 227.586590][ T8013] FAT-fs (loop4): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 227.604732][ T5206] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.649070][ T8018] rdma_rxe: rxe_newlink: failed to add bond0 [ 227.667846][ T8019] syz0: rxe_newlink: already configured on bond0 [ 227.685085][ T3374] hid (null): unknown global tag 0x11 [ 227.689844][ T8019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.691666][ T3374] hid-generic 0005:0007:0005.0028: ignoring exceeding usage max [ 227.713652][ T8019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.724794][ T8023] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1258'. [ 227.746366][ T3374] hid-generic 0005:0007:0005.0028: unexpected long global item [ 227.757142][ T3374] hid-generic 0005:0007:0005.0028: probe with driver hid-generic failed with error -22 [ 227.766678][ T8019] smc: removing ib device syz0 [ 227.778582][ T8018] 9pnet: Could not find request transport: f [ 227.810977][ T8032] FAULT_INJECTION: forcing a failure. [ 227.810977][ T8032] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 227.824217][ T8032] CPU: 1 UID: 0 PID: 8032 Comm: syz.5.1264 Tainted: G W 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 227.836412][ T8032] Tainted: [W]=WARN [ 227.840226][ T8032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 227.850371][ T8032] Call Trace: [ 227.853672][ T8032] [ 227.856667][ T8032] dump_stack_lvl+0xf2/0x150 [ 227.861307][ T8032] dump_stack+0x15/0x1a [ 227.865597][ T8032] should_fail_ex+0x223/0x230 [ 227.870302][ T8032] should_fail+0xb/0x10 [ 227.874497][ T8032] should_fail_usercopy+0x1a/0x20 [ 227.879693][ T8032] _copy_from_user+0x1e/0xb0 [ 227.884383][ T8032] __sys_bpf+0x14e/0x7a0 [ 227.888749][ T8032] __x64_sys_bpf+0x43/0x50 [ 227.893221][ T8032] x64_sys_call+0x2914/0x2dc0 [ 227.897970][ T8032] do_syscall_64+0xc9/0x1c0 [ 227.902496][ T8032] ? clear_bhb_loop+0x55/0xb0 [ 227.907224][ T8032] ? clear_bhb_loop+0x55/0xb0 [ 227.911998][ T8032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.918014][ T8032] RIP: 0033:0x7f25670eff19 [ 227.922450][ T8032] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 227.942194][ T8032] RSP: 002b:00007f2565767058 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 227.950634][ T8032] RAX: ffffffffffffffda RBX: 00007f25672b5fa0 RCX: 00007f25670eff19 [ 227.958677][ T8032] RDX: 0000000000000094 RSI: 0000000020001800 RDI: 0000000000000005 [ 227.966691][ T8032] RBP: 00007f25657670a0 R08: 0000000000000000 R09: 0000000000000000 [ 227.974852][ T8032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.982931][ T8032] R13: 0000000000000000 R14: 00007f25672b5fa0 R15: 00007ffe10c38808 [ 227.991046][ T8032] [ 228.074851][ T8038] loop2: detected capacity change from 0 to 512 [ 228.078087][ T8045] loop5: detected capacity change from 0 to 1024 [ 228.091623][ T8038] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 228.132921][ T8038] EXT4-fs (loop2): 1 truncate cleaned up [ 228.140316][ T8038] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.283159][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.301179][ T8050] loop5: detected capacity change from 0 to 512 [ 228.307836][ T8050] EXT4-fs: Ignoring removed mblk_io_submit option [ 228.320190][ T8050] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.354369][ T8058] loop2: detected capacity change from 0 to 512 [ 228.375897][ T8050] support for cryptoloop has been removed. Use dm-crypt instead. [ 228.406666][ T8058] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.436409][ T8058] ext4 filesystem being mounted at /248/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.466350][ T8058] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.512736][ T8062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.538843][ T8062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.559450][ T8062] netlink: 'syz.1.1272': attribute type 27 has an invalid length. [ 228.592699][ T8064] loop2: detected capacity change from 0 to 128 [ 228.736058][ T8075] loop3: detected capacity change from 0 to 128 [ 228.751863][ T8075] syz.3.1277: attempt to access beyond end of device [ 228.751863][ T8075] loop3: rw=2049, sector=145, nr_sectors = 3 limit=128 [ 228.782954][ T8075] syz.3.1277: attempt to access beyond end of device [ 228.782954][ T8075] loop3: rw=2049, sector=148, nr_sectors = 1 limit=128 [ 228.796525][ T8075] Buffer I/O error on dev loop3, logical block 148, lost async page write [ 228.805431][ T8075] syz.3.1277: attempt to access beyond end of device [ 228.805431][ T8075] loop3: rw=2049, sector=149, nr_sectors = 1 limit=128 [ 228.819051][ T8075] Buffer I/O error on dev loop3, logical block 149, lost async page write [ 228.827816][ T8075] syz.3.1277: attempt to access beyond end of device [ 228.827816][ T8075] loop3: rw=2049, sector=150, nr_sectors = 1 limit=128 [ 228.841338][ T8075] Buffer I/O error on dev loop3, logical block 150, lost async page write [ 228.853548][ T8075] syz.3.1277: attempt to access beyond end of device [ 228.853548][ T8075] loop3: rw=2049, sector=151, nr_sectors = 1 limit=128 [ 228.856220][ T8080] FAULT_INJECTION: forcing a failure. [ 228.856220][ T8080] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 228.867154][ T8075] Buffer I/O error on dev loop3, logical block 151, lost async page write [ 228.880208][ T8080] CPU: 1 UID: 0 PID: 8080 Comm: syz.2.1278 Tainted: G W 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 228.880248][ T8080] Tainted: [W]=WARN [ 228.891790][ T8075] syz.3.1277: attempt to access beyond end of device [ 228.891790][ T8075] loop3: rw=2049, sector=152, nr_sectors = 1 limit=128 [ 228.900865][ T8080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 228.900883][ T8080] Call Trace: [ 228.900892][ T8080] [ 228.900901][ T8080] dump_stack_lvl+0xf2/0x150 [ 228.904714][ T8075] Buffer I/O error on dev loop3, logical block 152, lost async page write [ 228.905012][ T8075] syz.3.1277: attempt to access beyond end of device [ 228.905012][ T8075] loop3: rw=2049, sector=153, nr_sectors = 80 limit=128 [ 228.918090][ T8080] dump_stack+0x15/0x1a [ 228.918134][ T8080] should_fail_ex+0x223/0x230 [ 228.969918][ T8080] should_fail+0xb/0x10 [ 228.974097][ T8080] should_fail_usercopy+0x1a/0x20 [ 228.979217][ T8080] _copy_from_user+0x1e/0xb0 [ 228.983836][ T8080] copy_msghdr_from_user+0x54/0x2a0 [ 228.989080][ T8080] ? __fget_files+0x17c/0x1c0 [ 228.993904][ T8080] __sys_sendmsg+0x13e/0x230 [ 228.998528][ T8080] __x64_sys_sendmsg+0x46/0x50 [ 229.003364][ T8080] x64_sys_call+0x2734/0x2dc0 [ 229.008086][ T8080] do_syscall_64+0xc9/0x1c0 [ 229.012736][ T8080] ? clear_bhb_loop+0x55/0xb0 [ 229.012777][ T8080] ? clear_bhb_loop+0x55/0xb0 [ 229.012801][ T8080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.012877][ T8080] RIP: 0033:0x7fa7e049ff19 [ 229.012895][ T8080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 229.012914][ T8080] RSP: 002b:00007fa7deb17058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 229.012943][ T8080] RAX: ffffffffffffffda RBX: 00007fa7e0665fa0 RCX: 00007fa7e049ff19 [ 229.012958][ T8080] RDX: 0000000000000000 RSI: 00000000200008c0 RDI: 0000000000000004 [ 229.012973][ T8080] RBP: 00007fa7deb170a0 R08: 0000000000000000 R09: 0000000000000000 [ 229.012990][ T8080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.013007][ T8080] R13: 0000000000000000 R14: 00007fa7e0665fa0 R15: 00007ffff1c3b9c8 [ 229.013026][ T8080] [ 229.157271][ T5206] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.206524][ T8087] loop2: detected capacity change from 0 to 128 [ 229.338036][ T11] kworker/u8:0: attempt to access beyond end of device [ 229.338036][ T11] loop3: rw=1, sector=233, nr_sectors = 808 limit=128 [ 229.545491][ T8102] loop2: detected capacity change from 0 to 512 [ 229.937321][ T8102] EXT4-fs (loop2): blocks per group (71) and clusters per group (20800) inconsistent [ 230.499528][ T8111] loop3: detected capacity change from 0 to 512 [ 230.547341][ T8111] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.600786][ T8111] ext4 filesystem being mounted at /256/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.643678][ T8111] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.267463][ T8123] loop3: detected capacity change from 0 to 512 [ 231.269027][ T8121] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1292'. [ 231.300333][ T8123] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 231.329414][ T8127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.340343][ T8123] EXT4-fs (loop3): 1 truncate cleaned up [ 231.356252][ T8123] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.362284][ T8130] loop4: detected capacity change from 0 to 2048 [ 231.375079][ T8127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.395218][ T8127] netlink: 'syz.2.1294': attribute type 27 has an invalid length. [ 231.417013][ T8130] loop4: p1 < > p4 < > [ 231.472452][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.556168][ T8135] loop3: detected capacity change from 0 to 128 [ 231.570330][ T8135] syz.3.1296: attempt to access beyond end of device [ 231.570330][ T8135] loop3: rw=2049, sector=145, nr_sectors = 3 limit=128 [ 231.624486][ T8138] loop4: detected capacity change from 0 to 512 [ 231.636189][ T8138] EXT4-fs (loop4): blocks per group (71) and clusters per group (20800) inconsistent [ 231.650245][ T8138] loop4: detected capacity change from 0 to 512 [ 231.672132][ T8138] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.1298: corrupted in-inode xattr: invalid ea_ino [ 231.685840][ T8138] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.1298: couldn't read orphan inode 15 (err -117) [ 231.698124][ T8135] syz.3.1296: attempt to access beyond end of device [ 231.698124][ T8135] loop3: rw=2049, sector=148, nr_sectors = 1 limit=128 [ 231.711602][ T8135] Buffer I/O error on dev loop3, logical block 148, lost async page write [ 231.720700][ T8138] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.735935][ T8135] Buffer I/O error on dev loop3, logical block 149, lost async page write [ 231.752977][ T8135] Buffer I/O error on dev loop3, logical block 150, lost async page write [ 231.774275][ T8135] Buffer I/O error on dev loop3, logical block 151, lost async page write [ 231.794300][ T8135] Buffer I/O error on dev loop3, logical block 152, lost async page write [ 231.893569][ T8150] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1303'. [ 231.962651][ T8152] loop2: detected capacity change from 0 to 512 [ 231.974147][ T8154] loop5: detected capacity change from 0 to 512 [ 232.016588][ T8154] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 232.025693][ T8154] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 232.040611][ T8152] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.041981][ T8159] kernel profiling enabled (shift: 17) [ 232.064816][ T29] kauditd_printk_skb: 255 callbacks suppressed [ 232.064831][ T29] audit: type=1400 audit(1733399098.856:3470): avc: denied { shutdown } for pid=8158 comm="syz.3.1306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 232.071502][ T8152] ext4 filesystem being mounted at /259/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.102413][ T8152] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.116854][ T8154] EXT4-fs (loop5): warning: checktime reached, running e2fsck is recommended [ 232.158316][ T8154] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 232.166678][ T8154] System zones: 0-2, 18-18, 34-34 [ 232.186214][ T8154] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 232.261193][ T8154] EXT4-fs (loop5): 1 truncate cleaned up [ 232.268310][ T8167] loop3: detected capacity change from 0 to 512 [ 232.286641][ T8167] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 232.307312][ T8170] SELinux: policydb version 1944042232 does not match my version range 15-33 [ 232.307317][ T8154] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.319448][ T8170] SELinux: failed to load policy [ 232.329652][ T8167] EXT4-fs (loop3): 1 truncate cleaned up [ 232.343722][ T8167] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.388597][ T8154] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 232.413686][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.500783][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.519301][ T5206] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.589399][ T8181] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1312'. [ 232.600550][ T8175] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1313'. [ 232.605937][ T8178] pim6reg: entered allmulticast mode [ 232.617141][ T8178] pim6reg: left allmulticast mode [ 232.766554][ T8191] 9pnet_fd: Insufficient options for proto=fd [ 232.781689][ T8189] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1316'. [ 232.919475][ T29] audit: type=1400 audit(1733399099.716:3471): avc: denied { execmem } for pid=8202 comm="syz.3.1321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 233.018269][ T8205] loop5: detected capacity change from 0 to 128 [ 233.069775][ T29] audit: type=1326 audit(1733399099.856:3472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8204 comm="syz.5.1320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25670eff19 code=0x7ffc0000 [ 233.093304][ T29] audit: type=1326 audit(1733399099.856:3473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8204 comm="syz.5.1320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25670eff19 code=0x7ffc0000 [ 233.117018][ T29] audit: type=1326 audit(1733399099.866:3474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8204 comm="syz.5.1320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f25670eff19 code=0x7ffc0000 [ 233.140740][ T29] audit: type=1326 audit(1733399099.866:3475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8204 comm="syz.5.1320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25670eff19 code=0x7ffc0000 [ 233.164676][ T29] audit: type=1326 audit(1733399099.866:3476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8204 comm="syz.5.1320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25670eff19 code=0x7ffc0000 [ 233.188107][ T29] audit: type=1326 audit(1733399099.866:3477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8204 comm="syz.5.1320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f25670eff19 code=0x7ffc0000 [ 233.212146][ T29] audit: type=1326 audit(1733399099.866:3478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8204 comm="syz.5.1320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25670eff19 code=0x7ffc0000 [ 233.235675][ T29] audit: type=1326 audit(1733399099.866:3479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8204 comm="syz.5.1320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25670eff19 code=0x7ffc0000 [ 233.248503][ T8215] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1323'. [ 233.282551][ T8203] loop3: detected capacity change from 0 to 512 [ 233.304684][ T8203] EXT4-fs: Ignoring removed mblk_io_submit option [ 233.346689][ T8203] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.432820][ T8222] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1325'. [ 233.456446][ T8203] support for cryptoloop has been removed. Use dm-crypt instead. [ 233.476190][ T8228] loop2: detected capacity change from 0 to 1024 [ 233.783536][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.868812][ T8233] loop3: detected capacity change from 0 to 512 [ 233.879991][ T8233] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 233.916625][ T8233] EXT4-fs (loop3): 1 truncate cleaned up [ 233.922827][ T8233] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.009238][ T8235] loop2: detected capacity change from 0 to 512 [ 234.020860][ T8235] EXT4-fs: Ignoring removed mblk_io_submit option [ 234.026109][ T8239] netlink: 'syz.1.1329': attribute type 13 has an invalid length. [ 234.035305][ T8239] netlink: 'syz.1.1329': attribute type 27 has an invalid length. [ 234.049699][ T8241] loop5: detected capacity change from 0 to 512 [ 234.056702][ T8241] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 234.068479][ T8241] EXT4-fs (loop5): 1 truncate cleaned up [ 234.068600][ T8235] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.226213][ T8235] support for cryptoloop has been removed. Use dm-crypt instead. [ 234.287282][ T8254] SELinux: policydb version 1944042232 does not match my version range 15-33 [ 234.287550][ T8251] loop5: detected capacity change from 0 to 128 [ 234.306034][ T8254] SELinux: failed to load policy [ 234.428792][ T8257] FAULT_INJECTION: forcing a failure. [ 234.428792][ T8257] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 234.442006][ T8257] CPU: 1 UID: 0 PID: 8257 Comm: syz.5.1336 Tainted: G W 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 234.454254][ T8257] Tainted: [W]=WARN [ 234.458121][ T8257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 234.468249][ T8257] Call Trace: [ 234.471555][ T8257] [ 234.474555][ T8257] dump_stack_lvl+0xf2/0x150 [ 234.479236][ T8257] dump_stack+0x15/0x1a [ 234.483539][ T8257] should_fail_ex+0x223/0x230 [ 234.488242][ T8257] should_fail+0xb/0x10 [ 234.492415][ T8257] should_fail_usercopy+0x1a/0x20 [ 234.497457][ T8257] _copy_from_user+0x1e/0xb0 [ 234.502251][ T8257] move_addr_to_kernel+0x82/0x120 [ 234.507367][ T8257] __sys_sendto+0x12e/0x230 [ 234.511925][ T8257] __x64_sys_sendto+0x78/0x90 [ 234.516696][ T8257] x64_sys_call+0x29fa/0x2dc0 [ 234.521404][ T8257] do_syscall_64+0xc9/0x1c0 [ 234.525933][ T8257] ? clear_bhb_loop+0x55/0xb0 [ 234.530709][ T8257] ? clear_bhb_loop+0x55/0xb0 [ 234.535402][ T8257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.541332][ T8257] RIP: 0033:0x7f25670eff19 [ 234.545765][ T8257] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.565395][ T8257] RSP: 002b:00007f2565767058 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 234.573886][ T8257] RAX: ffffffffffffffda RBX: 00007f25672b5fa0 RCX: 00007f25670eff19 [ 234.581961][ T8257] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 234.589954][ T8257] RBP: 00007f25657670a0 R08: 0000000020b63fe4 R09: 000000000000001c [ 234.597945][ T8257] R10: 000000002200c851 R11: 0000000000000246 R12: 0000000000000001 [ 234.606024][ T8257] R13: 0000000000000000 R14: 00007f25672b5fa0 R15: 00007ffe10c38808 [ 234.614096][ T8257] [ 234.806874][ T8261] loop5: detected capacity change from 0 to 512 [ 234.814163][ T8261] EXT4-fs (loop5): blocks per group (71) and clusters per group (20800) inconsistent [ 235.178597][ T8263] pim6reg: entered allmulticast mode [ 235.229103][ T8264] pim6reg: left allmulticast mode [ 235.454281][ T8266] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1339'. [ 235.600345][ T8268] 9pnet_fd: Insufficient options for proto=fd [ 235.662708][ T8268] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1340'. [ 235.709897][ T8261] loop5: detected capacity change from 0 to 512 [ 235.725082][ T8261] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.1337: corrupted in-inode xattr: invalid ea_ino [ 235.739474][ T8261] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.1337: couldn't read orphan inode 15 (err -117) [ 235.911515][ T8276] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1342'. [ 236.053406][ T8281] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1344'. [ 236.093128][ T8281] hsr_slave_1 (unregistering): left promiscuous mode [ 236.210738][ T8286] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1346'. [ 236.339783][ T8293] loop4: detected capacity change from 0 to 512 [ 236.347109][ T8293] EXT4-fs (loop4): blocks per group (71) and clusters per group (20800) inconsistent [ 236.464177][ T8293] loop4: detected capacity change from 0 to 512 [ 236.487716][ T8293] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.1347: corrupted in-inode xattr: invalid ea_ino [ 236.502240][ T8293] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.1347: couldn't read orphan inode 15 (err -117) [ 236.559605][ T8301] loop3: detected capacity change from 0 to 128 [ 236.589522][ T8301] bio_check_eod: 6 callbacks suppressed [ 236.589538][ T8301] syz.3.1350: attempt to access beyond end of device [ 236.589538][ T8301] loop3: rw=2049, sector=145, nr_sectors = 3 limit=128 [ 236.654732][ T8301] syz.3.1350: attempt to access beyond end of device [ 236.654732][ T8301] loop3: rw=2049, sector=148, nr_sectors = 1 limit=128 [ 236.668282][ T8301] Buffer I/O error on dev loop3, logical block 148, lost async page write [ 236.679426][ T8301] syz.3.1350: attempt to access beyond end of device [ 236.679426][ T8301] loop3: rw=2049, sector=149, nr_sectors = 1 limit=128 [ 236.693052][ T8301] Buffer I/O error on dev loop3, logical block 149, lost async page write [ 236.702764][ T8301] syz.3.1350: attempt to access beyond end of device [ 236.702764][ T8301] loop3: rw=2049, sector=150, nr_sectors = 1 limit=128 [ 236.716669][ T8301] Buffer I/O error on dev loop3, logical block 150, lost async page write [ 236.725367][ T8301] syz.3.1350: attempt to access beyond end of device [ 236.725367][ T8301] loop3: rw=2049, sector=151, nr_sectors = 1 limit=128 [ 236.738844][ T8301] Buffer I/O error on dev loop3, logical block 151, lost async page write [ 236.750273][ T8301] syz.3.1350: attempt to access beyond end of device [ 236.750273][ T8301] loop3: rw=2049, sector=152, nr_sectors = 1 limit=128 [ 236.763776][ T8301] Buffer I/O error on dev loop3, logical block 152, lost async page write [ 236.772900][ T8301] syz.3.1350: attempt to access beyond end of device [ 236.772900][ T8301] loop3: rw=2049, sector=153, nr_sectors = 80 limit=128 [ 236.863138][ T60] kworker/u8:4: attempt to access beyond end of device [ 236.863138][ T60] loop3: rw=1, sector=233, nr_sectors = 808 limit=128 [ 236.911592][ T8316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.937877][ T8316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.967781][ T8316] netlink: 'syz.3.1357': attribute type 27 has an invalid length. [ 237.128555][ T8318] loop5: detected capacity change from 0 to 512 [ 237.156013][ T8318] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 237.175172][ T8318] EXT4-fs (loop5): 1 truncate cleaned up [ 237.187212][ T8325] vlan2: entered allmulticast mode [ 237.223012][ T8328] loop5: detected capacity change from 0 to 512 [ 237.249733][ T8328] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.1362: Invalid inode bitmap blk 4 in block_group 0 [ 237.282124][ T8328] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 237.377554][ T8337] FAULT_INJECTION: forcing a failure. [ 237.377554][ T8337] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 237.390687][ T8337] CPU: 0 UID: 0 PID: 8337 Comm: +}[@ Tainted: G W 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 237.402506][ T8337] Tainted: [W]=WARN [ 237.406324][ T8337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 237.416445][ T8337] Call Trace: [ 237.419782][ T8337] [ 237.422783][ T8337] dump_stack_lvl+0xf2/0x150 [ 237.427475][ T8337] dump_stack+0x15/0x1a [ 237.431702][ T8337] should_fail_ex+0x223/0x230 [ 237.436417][ T8337] should_fail+0xb/0x10 [ 237.440591][ T8337] should_fail_usercopy+0x1a/0x20 [ 237.445702][ T8337] _copy_from_iter+0xd5/0xd00 [ 237.450411][ T8337] ? should_failslab+0x8f/0xb0 [ 237.455319][ T8337] ? kmem_cache_alloc_noprof+0x18e/0x320 [ 237.461008][ T8337] ? __build_skb+0x30/0x70 [ 237.465452][ T8337] ? __build_skb_around+0x196/0x1f0 [ 237.470714][ T8337] ? __virt_addr_valid+0x1ed/0x250 [ 237.475940][ T8337] ? __check_object_size+0x364/0x520 [ 237.481316][ T8337] netlink_sendmsg+0x460/0x6e0 [ 237.486112][ T8337] ? __pfx_netlink_sendmsg+0x10/0x10 [ 237.491434][ T8337] __sock_sendmsg+0x140/0x180 [ 237.496145][ T8337] ____sys_sendmsg+0x312/0x410 [ 237.500954][ T8337] __sys_sendmsg+0x19d/0x230 [ 237.505609][ T8337] __x64_sys_sendmsg+0x46/0x50 [ 237.510418][ T8337] x64_sys_call+0x2734/0x2dc0 [ 237.515148][ T8337] do_syscall_64+0xc9/0x1c0 [ 237.519799][ T8337] ? clear_bhb_loop+0x55/0xb0 [ 237.524486][ T8337] ? clear_bhb_loop+0x55/0xb0 [ 237.529291][ T8337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.535250][ T8337] RIP: 0033:0x7fa7e049ff19 [ 237.539727][ T8337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.559346][ T8337] RSP: 002b:00007fa7deb17058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 237.567843][ T8337] RAX: ffffffffffffffda RBX: 00007fa7e0665fa0 RCX: 00007fa7e049ff19 [ 237.575884][ T8337] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000006 [ 237.583872][ T8337] RBP: 00007fa7deb170a0 R08: 0000000000000000 R09: 0000000000000000 [ 237.591878][ T8337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.599861][ T8337] R13: 0000000000000000 R14: 00007fa7e0665fa0 R15: 00007ffff1c3b9c8 [ 237.607923][ T8337] [ 237.615785][ T8339] loop5: detected capacity change from 0 to 1024 [ 237.705578][ T8345] loop2: detected capacity change from 0 to 512 [ 237.714188][ T8345] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 237.725352][ T8342] 9pnet_fd: Insufficient options for proto=fd [ 237.768424][ T8345] EXT4-fs (loop2): 1 truncate cleaned up [ 237.798606][ T8349] loop3: detected capacity change from 0 to 1024 [ 237.854372][ T8350] loop5: detected capacity change from 0 to 512 [ 237.861201][ T8350] EXT4-fs: Ignoring removed mblk_io_submit option [ 237.910653][ T8349] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 238.130326][ T29] kauditd_printk_skb: 138 callbacks suppressed [ 238.130341][ T29] audit: type=1400 audit(1733399104.926:3618): avc: denied { ioctl } for pid=8355 comm="syz.4.1372" path="socket:[19607]" dev="sockfs" ino=19607 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 238.215858][ T8350] support for cryptoloop has been removed. Use dm-crypt instead. [ 238.272322][ T8359] SELinux: policydb version 1944042232 does not match my version range 15-33 [ 238.285892][ T8359] SELinux: failed to load policy [ 238.372679][ T8361] loop2: detected capacity change from 0 to 512 [ 238.399085][ T29] audit: type=1400 audit(1733399105.196:3619): avc: denied { write } for pid=8348 comm="syz.3.1370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 238.446017][ T8361] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.1375: Invalid inode bitmap blk 4 in block_group 0 [ 238.524560][ T8361] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 238.554322][ T8371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.563267][ T8371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.590657][ T8371] netlink: 'syz.5.1378': attribute type 27 has an invalid length. [ 238.603884][ T8374] 9pnet_fd: Insufficient options for proto=fd [ 238.655774][ T8377] loop2: detected capacity change from 0 to 128 [ 238.687878][ T29] audit: type=1326 audit(1733399105.486:3620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8376 comm="syz.2.1379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7e049ff19 code=0x7ffc0000 [ 238.741547][ T29] audit: type=1326 audit(1733399105.486:3621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8376 comm="syz.2.1379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa7e049ff19 code=0x7ffc0000 [ 238.765122][ T29] audit: type=1326 audit(1733399105.486:3622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8376 comm="syz.2.1379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7e049ff19 code=0x7ffc0000 [ 238.789072][ T29] audit: type=1326 audit(1733399105.516:3623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8376 comm="syz.2.1379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa7e049ff19 code=0x7ffc0000 [ 238.812760][ T29] audit: type=1326 audit(1733399105.516:3624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8376 comm="syz.2.1379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7e049ff19 code=0x7ffc0000 [ 238.836384][ T29] audit: type=1326 audit(1733399105.516:3625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8376 comm="syz.2.1379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa7e049ff19 code=0x7ffc0000 [ 238.859768][ T29] audit: type=1326 audit(1733399105.516:3626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8376 comm="syz.2.1379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7e049ff19 code=0x7ffc0000 [ 238.883228][ T29] audit: type=1326 audit(1733399105.516:3627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8376 comm="syz.2.1379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fa7e049ff19 code=0x7ffc0000 [ 238.957393][ T8397] pim6reg: entered allmulticast mode [ 238.964824][ T8397] pim6reg: left allmulticast mode [ 238.972656][ T8399] xt_TCPMSS: Only works on TCP SYN packets [ 239.016955][ T8401] ================================================================== [ 239.025097][ T8401] BUG: KCSAN: data-race in mas_wr_store_entry / mtree_range_walk [ 239.032964][ T8401] [ 239.035312][ T8401] write to 0xffff888104946b60 of 8 bytes by task 8394 on cpu 0: [ 239.042955][ T8401] mas_wr_store_entry+0x1490/0x2d10 [ 239.048178][ T8401] mas_store_prealloc+0x6bf/0x960 [ 239.053219][ T8401] commit_merge+0x441/0x740 [ 239.057753][ T8401] vma_expand+0x211/0x360 [ 239.062083][ T8401] vma_merge_new_range+0x2da/0x340 [ 239.067197][ T8401] __mmap_region+0x67c/0x13f0 [ 239.071881][ T8401] mmap_region+0x164/0x1e0 [ 239.076319][ T8401] do_mmap+0x718/0xb60 [ 239.080404][ T8401] vm_mmap_pgoff+0x133/0x290 [ 239.085011][ T8401] ksys_mmap_pgoff+0xd0/0x330 [ 239.089706][ T8401] x64_sys_call+0x1940/0x2dc0 [ 239.094388][ T8401] do_syscall_64+0xc9/0x1c0 [ 239.098906][ T8401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.104822][ T8401] [ 239.107145][ T8401] read to 0xffff888104946b60 of 8 bytes by task 8401 on cpu 1: [ 239.114690][ T8401] mtree_range_walk+0x1b4/0x460 [ 239.119564][ T8401] mas_walk+0x16e/0x320 [ 239.123733][ T8401] lock_vma_under_rcu+0x95/0x260 [ 239.128673][ T8401] exc_page_fault+0x150/0x650 [ 239.133364][ T8401] asm_exc_page_fault+0x26/0x30 [ 239.138231][ T8401] [ 239.140552][ T8401] value changed: 0x00007f98f4b54fff -> 0x00007f98f4b33fff [ 239.147746][ T8401] [ 239.150079][ T8401] Reported by Kernel Concurrency Sanitizer on: [ 239.156247][ T8401] CPU: 1 UID: 0 PID: 8401 Comm: syz.3.1386 Tainted: G W 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 239.168430][ T8401] Tainted: [W]=WARN [ 239.172242][ T8401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 239.182318][ T8401] ================================================================== [ 239.221366][ T8406] loop2: detected capacity change from 0 to 512 [ 239.247613][ T8406] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.1389: Invalid inode bitmap blk 4 in block_group 0 [ 239.317188][ T8406] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters