last executing test programs:

2.77946973s ago: executing program 0 (id=1774):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0x2e, &(0x7f00000000c0)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x64, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x8000, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x3, 0x0, @void}}}}}}}, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
pipe2$9p(&(0x7f0000000240)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x1c1c41, 0x6)
write$P9_RVERSION(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r6 = dup(r2)
write$P9_RLERRORu(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="5300000007000046009d40edce82cd28e1e1edab51", @ANYBLOB='Nd'], 0x53)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[], [], 0x6b}})
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x2d)
syz_clone(0x18b24200, 0x0, 0xffffffffffffff77, 0x0, 0x0, 0x0)
r9 = open(&(0x7f0000000200)='./file0\x00', 0x40080c0, 0xe)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10)
syz_read_part_table(0x5c9, &(0x7f0000000880)="$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")
fcntl$setlease(r9, 0x400, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r9)

1.880651557s ago: executing program 0 (id=1783):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
sendmsg$nl_route(r0, 0x0, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0xfff, @local, 0x9}, {0xa, 0x4e22, 0xd, @loopback, 0x3}, r3, 0x40}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0xfffd, 0x0, @empty, 0x4}, {0xa, 0x0, 0x0, @empty, 0xfffffffc}, r3}}, 0x48)
r4 = dup2(r2, r2)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r4, &(0x7f00000008c0)={0x16, 0x98, 0xfa00, {0x0, 0x2, r3, 0x10, 0x0, @in={0x2, 0x4e22, @loopback}}}, 0xa0)
r5 = gettid()
timer_create(0xeae0d1814e5870d5, &(0x7f0000533fa0)={0x0, 0x28, 0x4, @tid=r5}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0)
ioperm(0x1, 0x8, 0x9)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r8}, 0x10)
r9 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000bc0)="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", 0x108, r9)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r10, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
fgetxattr(0xffffffffffffffff, &(0x7f00000002c0)=@known='security.selinux\x00', 0x0, 0x0)
r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000df0300000000000000000000000000000000000087c8c02327922eadfaf3840aa781b9dd23653a3b7d4fca151d2748c20fe01ed2e1a39e9e0d5702aaa78fa7ad20790c92b8cef9e77a103a96cabb79835f8857311d5250488bb4f38d7213791c3c0f9d119dea026f304db3be5224a060d3295f429aa04f9196f1234729d28543f90ef987d40809cadc62ba438f49f3a9c933a5751c1c6bb3d22ab7e9e3fce1223974e97b2fa5a5d0744f29991212db1050bcaa30e2eb87eb54da39c55e4380ebbee24be76f7f61dd9de560e3ab447dbe16e9064e567021a0ab31c122eb64574f4edd8b881377338bbedf40c54f247ed4144c5e"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000d60000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

1.491719115s ago: executing program 3 (id=1787):
socket$inet_udp(0x2, 0x2, 0x0)
r0 = syz_io_uring_setup(0x16d2, &(0x7f00000000c0)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="170000000000000005000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x485e, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
open(&(0x7f0000000140)='./file0\x00', 0x2acc0, 0x0)
pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r6 = dup(r5)
write$P9_RLERRORu(r6, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xb6)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

1.468120045s ago: executing program 3 (id=1788):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xa0242, 0x0)
pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x42)
sendfile(r3, r3, 0x0, 0x80000000)

1.348845494s ago: executing program 4 (id=1789):
r0 = syz_io_uring_setup(0x16d2, &(0x7f00000000c0)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

1.282009974s ago: executing program 4 (id=1790):
mmap(&(0x7f0000261000/0xc00000)=nil, 0xc00000, 0x3000003, 0x31, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000651000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000000)=0x9, 0x4, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="190000000400000008000000ff"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)

1.258601524s ago: executing program 3 (id=1791):
syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x0)

1.245082394s ago: executing program 4 (id=1792):
syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000540)={[{@delalloc}, {@data_err_abort}, {@barrier_val}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@oldalloc}, {@dioread_nolock}]}, 0x1, 0x560, &(0x7f0000002240)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000))
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0})
write(r3, &(0x7f0000000000)="fa", 0xfffffdef)
fchown(r0, 0x0, 0x0)
setgroups(0x1, &(0x7f0000000280)=[0x0])
r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x441, 0x108)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'})
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)=""/255, 0xff}], &(0x7f00000002c0)=[0x5]}, 0x20)
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffff3900000000000000000000000000000000000000000000000000000000000000000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000710002000000000001000000f90000000a"], 0x189)
r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0)
fcntl$setlease(r5, 0x400, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1000, 0x80)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
unshare(0x62040200)

1.183944814s ago: executing program 3 (id=1793):
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd0000001000020004001000080001", 0x53}], 0x1)

1.158018924s ago: executing program 3 (id=1794):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d)
sendfile(r0, r1, 0x0, 0x8000002b)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca)
r3 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x8c7)
write$binfmt_elf32(r1, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES32=r3, @ANYRES8=r3], 0x69)
close(r2)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)

991.115563ms ago: executing program 0 (id=1796):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29, <r2=>0xffffffffffffffff}, './file0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c80)={0xffffffffffffffff, 0xe0, &(0x7f0000001b80)={0x0, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000001cc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r5=>0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000380)=[0x0], &(0x7f00000006c0), <r6=>0x0, 0x59, &(0x7f0000000940)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000001ac0), &(0x7f0000000340), 0x8, 0xeb, 0x8, 0x6, &(0x7f00000009c0)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x6, &(0x7f0000000640)=ANY=[@ANYBLOB="f444caea5c290dd7efbf130b28755b4708ba4473c8b04db03576b9637e83bb71ba5a29cc9391773d", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8a7f0000000000bfa200000000000007020005d6b500f8ffffffb7030000080000ed8592ecb5998ce400850000000100"], &(0x7f0000000240)='GPL\x00', 0x600006, 0x0, 0x0, 0x40f00, 0x0, '\x00', r5, @fallback=0xe, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94)
r7 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000b00)=ANY=[@ANYRESDEC=r4, @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095f7603daf63dd0ea7ff737e369b4ab7f7cd933f33581660c7a0b190e06a4b3b829d10b29500e1603a4bf4"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r9}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r12=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010002000000000000000f0000000500300000000000080031000700000008000300", @ANYRES32=r12, @ANYBLOB="a29923126653b11db6f1863c82d36689a201f5a7bc91fc9b6266036e1b740e2a4d73f60affecc757b753265ab8dc571056d48331a021c249d7c2099cab44e948638084e13d78a726233157147ad7b7406f7846e9275c095730db4c8bcfb5d85e697bc80a6996e2efdd3e00000000000000b794b08f9dcf6d1a6235f009424fa246d9b362a66cfef4762945a9839fc57130bfe0b992f80416c78a8d412a388a900018c3ec46ed"], 0x2c}}, 0x0)
r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x50, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r13}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r7, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'})
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=@getchain={0x74, 0x66, 0xa00, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x1, 0xfff1}, {0x0, 0x4}, {0x10, 0x2}}, [{0x8}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0xfffffffe}, {0x8, 0xb, 0x10001}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x87bb}]}, 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x8000)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000580)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
r14 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file1\x00', 0x18000, &(0x7f0000003a00)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRESOCT, @ANYBLOB="b022fd84099290ab8ebe39cfc17f80bc2926131e9437a1dea9ca1756900531c14b67f7a9edd0d80c7c73649053153a8d8db6d3c0d3b3fa951f57d14071b61a27d968a0ae7bd580d2d9fd9034451c3ecffae80b234e72fb11e3a60c1208bd5262c5009e3e45582ed4203850292ed682fc5e26f5c2af47718ee5b4f2ed68f0b21b813ec22c4c61d3f22f5a01ebea6c484d8ef4ca90180b4587e0bee2f782fef574aa1e0ebc5d9e42452910d03c12feff7848f72ac5430476b9dc2457a09efdc6f181c408abe7b30cccd2c8fb85389e1cacd4f4b29a3d4a55941bf1bb416203732d6712d5a89470876ae6daec66f3fe1b39982c2781b115e20af7ce0a0c7c77db1073adc6e11597bd9f540f90f60b92dc84a5c764379c0b9426ff4f547182502633aa754dcfc63e46c7cef8e3a0c29bf5184ac150e90d884c59cba3dae7c531fb114534292629d8532c0f67ee37f2c349ea8f28199aff2aa335df5db411287a73adfbfff212cf7b6d277a361c55af160d98b5c3db84da37d80e07269c33f60f111ec3c09d8843e1f5499e71de9b48882b9415d45b20393888ec49f307d535580947b5a5b40b465382aa4a579f317d91792f8ed70e9401863bc0a21d7e15f828ae8f13c673a30cba6f10f89c8a018cc8bbe7072ffe1c5d4ef11f0f82cf967faef8608f8b289245f87607917b0c2578dbbe5186ac78b8cd9a5aff567aebe8a73dd547fdc503885a2df4953f3497688b7b1ede6a2e529b25ecc246a7bcb00077059d7e0100aa20cb4d1dbac6eec0a9f803601c799eddb9b271f0530842291167abffb982fe47a496e884ee3c17850f970cb3ac3342b832b8b984e2eb4836afb7727f7310a347add2a1094cfff7b44516593bbf15f3a9e0e2a788e99bdec6706ae9a39b4f8983ae38d4cdf866d9670de91036ea00006f195ec4b4ce462ea624b8875825262a301f9235496b935506109287bbcf4754e3fa637428a2e39a80cd07ffafd756839abddc721421754fcae705ab432fcdd6f3c004dfad9e6bfa87746dd41649dcd2bf1728a3d6d2ddf27a52957422a27f9e478530873d9f1861b71f2378540648b171bcbd44533723ae1a89e56e2f570c0571eb3c66fac65e3abad003a828f2d21cc990e57b80dd3762fe1204eb320591d6a93f9052b80494b2f52ad89d6374cf33040e2484c3384946450bb65835d65bebb4a91c0f82e598e5aa7ff9ba79f27bbd46240287721d2759fa24cec97658d8f17b3f424293f7253b74dae4b966c8089c546936953d8ce63463c26f1e296f56e17e7f890b6001ed5d9f739036842e989b40c02d3fe5227b1fb08a98f1b1f0c336346698e70171e74e40c5304a356b29c947672f8a0535b7ce3a66b276d09ca3d9fff030e41598649a310875f5b5801c471182c1f617c907f06b5f36a1f9294b0f4a95d0fc98682b1e38f2f94fb08f20c5e5c7afaa9fbbd84734a98dd9b33188f6b79334b09ca8e2de56457242f904b114a2c313b193fe421d7fa97da5ab77f363e83b4698bf903022d13826ded79a905f07f97dc0fc4cc290b969ee37075a4a80a0d86d0696eeea2048ebd1a97f8319b3342e515ae5c9e25ee933d926ae0f31af55aeb07da6508756ac9549ba8bbc0095a17cb647df12f926e595a531d7208ef75cfd6239f65a0584121c75e00f7c77990b90e6350b1a84eba4430979bb726ab02050573af29156bed8e243527593dc0c6de41d0b6775818a96ee97d153826a217e8d7e88c6c44baa781a495afeba3882a06f5b1a87b1e8ee1edf404ac3ade6f5af1f6cd22c01506b5f84befb55c86f79b56e4d5754be8f564f57852f991c2275cbf55937666e022c2b2f0d020156152377859b345f74fe66791421e5571a7900df89c9bef5c3cb19113fae5d524ae2edea5ca91baf096c02e1e860c9b5a97882da598ef1e39fcb61d83f997675a772ac37c0fbe65a9d379b9204a915fdb6a7c7cdbd14c0893cd5e8cfd56f4021756d6c6a25b258a69922a41f3c7bc43b69f46293b381a27ae5a3cfcf2526f8eadcb540ec87d6009d6a2939882140f9a447c5be4328a0681aa3002f6a9dfd836b362fb1d423d7c9571aeb50e2a6acb9ab4e85574baf27b1028db0f6647aa7fe995c1fbf8ab422bb15acf9ae6de73972c9549cb601297bbb1c740e8761af16c4785c4827b5dc5e52f4a82000f6f87670ec19fea4e04e564fc83c0ccf1b7fa2bb9ac3e56addfa7f5f6d1d3d3c92dea5de9fa42f1414a769b0cdc40e306fee0ad66573628b83a07fe087fcb3377848e1a7869e592c83bb594284da28a4f5db381059d56e5d4989042dadbbe6000b66184ca8fe9d293f6c70988f3d7b8ee00546a21aaeca498ae06fa7becc5a55914c7a1ab714d955a8b0bd72e8d6bbf4dd451b525fcbc9fb5c10747dee3c755d39be5c2d52345c56185a8d6cee878b72255acabf7dbefafaed94838532fd01ea6244c4ac929de6846084a07d19de7098e62b613775abe326d402f707c4fbb3968b0aac7f1f27537cbdecee19151b310bcbe2c848ef41eea747e85f87d5a160b2cb6b28d137e30c69770c1651e44a66f8e3394bec03c8256b89fd59bec449c6a2bdb351f53d05e463f75b834624b8c7b557dc38a398d726d0846fc2f062b5b32d10af38ce844c6811aaef73ace1d86813bc37433670f6180f9bd112ae00133077fc7a0bd12d7b4b3a53a3c16a9cb0e8112f18691aa3bd2215afdaa1d00c8ea4f4a302eaaad2549f646a8ae66b953fa9cd649a02c4b152cc6c7b55d99ddc3d0fd1fcd84da355eb02581dba9e4d9dd235d2d4c4e094161440e70926221d76ce70c8762485c8b801550cc208e5d1bfd184e622ff0950a912dd47163c838fd562f09ca1690e76da55a471ec67cb83bbb103975bd4683f0393ec8b843f55ba2c0bdc6c90b50031cfe751792bd5d0cb50c8ee93086794e18c4ed66d6bd09b499f8ff2f63a8920701ab0af5b4b75402b1d65b1eb515dc46e181a1699f21e67349c904f02f8358e28faff2ade65703d14dc2774b02acc731eee0941675502d95e0c32a7304f6e9af85ef220daea0de24cf79e35a59412e62835d3032f88d9ed7befd4f708bfd2d236bd188b6f951bbe13e3add84f111e20324a523426611ec15fb376e7306cbec6867f0b945047a4facf78154e68a66a36972d5a18af1403baa9b4b51fddd072ee1f0087add02485b40323bd708b76406e10a927a913d91c5d771d3aeb3cfafb54b1016785c61ed13060d5f1b550676a656b874fd392ae61c5044218df55cbb72b819990ffdb130fb17a14f7cb5a2a8aafedc6526d83762dbf320f15758030eeecf5652dccf04cdc68827400c768a21daff47212b87357ff0bcb36cae4d113a5d9815b07332cb42329321664d93e43e6dcd6115987007fc623088004f8ac943736eb2a045a25b1bbfbbc97571eabf875d924f6b7b0e524b1afa0ff499473aa7976de83b91928e84f8e445728778fe0e5a356a57f09ed254848cec31b7c5c9c7a2fca21befe15ffc9317e96f7ad582684ce625791b99563781bf64983e77be4f1a5893beec4b560fc15e9c21dd0c29bf2879dfaa257ba5ec97957050d5b2c1f25eb4064488c139dbf88f3b7c70850d6fdbf0603cdd4011bf76e0d9ee5c2b128b50dba5689a8f04d4caf62d777eab31aab4b4195da780901352d284885bf417eb05367ee1b5f2f8c5cfe7f0394fb977f3a3f96084375e22ccf6c3ee4659d68d2b1948a4a1783a4db2282c67d39613fa67be4dd144793b76c09dd563ef3d169f34318acbd62d3b2d64f9173d16e9801132918c3390172c6f64d049b4c894d593419e5f4d5a513fc5a64ddcd05b034e6d16fe88ff89a520c464f842ad5a62a6fc46f0e9d56d05d6f5e625d25f537cca62910981dd463255318d8273db13d27fdc6c17c2c54776ba3a246c413957f297b8ecb1adb5c3f1d4d8e4d7705bdb9268f956d2845b68511edd51cdc5d05de5d6d4b3f573592986fed325f1f3c6a9ef7740f9d843e11981d1ca515c7e722ec4d691c5e4d3a146e39bcf407f66418f754bb2508cb4cc843aa9d8eb63850e5b9103682ecc1fc8f972f394be9d31cb9efd0f693d4ec41fe8d0993b45d2f422f9ab604d3371c1bda1daa3206a027c4de5c8f2cf6d1fc7e6d1423a6c71e84f24e0a4dfbf4a331deff2ae649df9681a08846efc9f0001e7ef106f1bfa25ee2799b13f1f076e30e58078d186afb65301497e982478babf143972cc7072f70829b8faee46e56a1451ff7ddd0dd35816bfa29eee361de60fbc3222e89d70f1495be94d0e82072a0e572e3055c905552e6c45d2af3d4f505a99d947667059c1c92ce2d3549077539c4cec4c07337361eeb9f78813bf9e77b0a79f391ae6eb6987c98679c6c3629348e7f01171ffc63deb53317f61ef8ddffdbd0ca2d8095c10c106b0968325bc1e88829d92399b809f1b881e9b9f0aeada5c5ee20fd0866070e3d5d41e62f5b6d2d25441babcdf9d3dc8ae3c140a6f352daf00ed38e248b236acd27f24bdebae0f272a5820ef77fb603fe3cc910a9d842129259e61d25dcf546cd770e4cccab470b20fa5f5972a6dd15853483de6e032f9726c166e81e8e0f9db4df397cc4a10b6e58708a31f48d7d2bae4ef92828c37088068b2ae433110dc7c08e6017d8b26e4e0382ca8fa62dc6f53c4cc2f0f78af72335c494f57f2414afe247e2291c395895bb18f701b6f4331feb759110c543dd94a238e782ad552047677558a50e7683d71a9e222fd19a9343e1d64528640a8099dedd19e4c747dda18ff25b15bddf750a54533b6ecfc75ad4a2909485f7fd759d45c74727b2e7300eae71a8784f5dd7f25b4b000ed3254264131cbbae316fb3a3bfbeb309dd2d18104629db354f447791eb882bf0333a520b8dba745b673d071b07e1de3e02fe751a1cf5908435b1a38edbd60483abdb15452c868844ceb96c449ab72999a55c79f9ce7405797142ef7095b4caf99d7bbe51cd4e963e4ffbbd2648761abd3894b5420a0add261ff9c0eff61aafd1ac5195ff15cadb5b0c7ce34d4d2d68146f3dae677e833b8be0f8a876153bb65398def38e4bf539d3a00047b19c483062fc1c2547b7d4f7d99b7035212ccfffeeb21ed7bbd6165ac7fbafbca3cef86fff655305706dd0baa607c50543bb0d66f0f4dbdd9c365fdb7b875dc5e7ee59afccc321ad1e31cc84687afda71231bb2e4dc3ce79ff3ce4bbafed8821a5b71bbf3844f110e2dd9557b596ac792d97506d22c0410bce435e20fa2e2d435161b5b6ac85f44763769723a7b629258f45e10578f70bef2e9c05af8032e357697dfcd30de9b3e953a36d6cb7a03ce69288b663f692793904dd8fb4ab6dc31ddf7f6942ef84c1e68c78bf9974f830ee2fccca84113cee98b47ed41a87fe610c5348dc38d4ada19862772317a70754870347ad87dbbb4c52349b0261aa8e108fcf387b24d4e2a77ba76e8472fd74ab6fa021277a24ef7a48d395b0fd1f9c0cf83bac56b433ffbfe5984a362e337969febf259988162c2b4842bd2fc0b230fee93a085003e615088abfe41889f7b5e0f380ffe55b66c1f7419993c3dd4aac5891494a183ddca2e415e1749489c925715f3c44d94b90d2d735f2b923bdbbbf1646580ab135356a9ee29bc19e73ded9a33798a69d248574e0c9e9f40a1c1ba52bc66a578d08b75f271a9e9f447efede09d6b3b57e0aa6322c18fd6f5e1c9d2753e0a6513cc04124ab89802eb9c504f0e5550868ab597629d7cc7447ed1b01b2ff4cf511aa098710b208b5aa0f595039a2f0e7294c5fe3b0c3e6c40000000000000000000000000000000002588beb10115f4b22f4ac997c86c49201ee9dceb2142ae61555bbbc4ef8cdd468a8ffbe6cbfc8877dd87292c70e10669bc99d8d5710f7719cc2cffc86cd529b6da2511d07aef4a1d9533ab58a76f80ad7fe91a17397d3c834811aa82947a223b0710ff55657e1088c161bbc64fa0e97bfabaf0fe975075c2e254e", @ANYRES32, @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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")
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7ffffdbd}]})
statfs(&(0x7f0000000000)='./file1\x00', &(0x7f0000002a00)=""/4096)
r15 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000e4d081c8153a373afe51f2769ef717a206d4c6460763dce23050001424d79c2e0f666ec4d8ae6c5978bc8b080df821b4780d8cbc9dc0382095999bd316412155d5ea5f37125346eaf1f2b508aa543180dc13e4ab21dd8829187028c763a797541f37cd4c1cda0d05", @ANYRES32=r14, @ANYBLOB="0000000000000000b7080000000000007b8af8ff09000000bfa200000200000007020000f877352c8da9e7ffffffb703000008000000b704d10f033b0000850000"], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r15}, 0x10)
setgroups(0x0, 0x0)

906.662603ms ago: executing program 0 (id=1797):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000740)=[@in6={0xa, 0x4e23, 0x6, @empty, 0x8000}], 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x34000811)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)=ANY=[], 0x1000f)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
bpf$BPF_LINK_CREATE(0x8, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff, 0x16, 0x0, @val=@iter={0x0}}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x1a)

763.350652ms ago: executing program 2 (id=1799):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x220, [0x0, 0x0, 0x0, 0x9, 0x0, 0x20000500], 0x7, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000020000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff01000000110000000000000000006e2a30456b880000145b41fe6900000079616d3000000000000000000000000079616d3000000000000000000000000076657468315f742f5f626f6e640000000180c20000000000000000000180c20000000000000000000000b0000000670100009001000073746174697374696300000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000646e61740000000000000000ff0300000000000000000000000000000000000010000000000000000180c2000000ffffffff000000006e666c6f67000000000000000000000000000000000000000000000000000000500000002b25121b6eb244d4f0fffbf04a000000007e4b000022d4e27ebdf3b9dc569e338e2c551c2fc4a19597ba4c501c8b1f16fb7809c40aeea768e825383d2afb577ed2bb6dd99f024b3f54ba00000000415544495400000000000000000000000b080000000000000000000000000000080000000000002000000000000000000002000000000000"]}, 0x298)

671.825572ms ago: executing program 2 (id=1800):
r0 = syz_io_uring_setup(0x16d2, &(0x7f00000000c0)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

639.607172ms ago: executing program 2 (id=1801):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x1})
fcntl$lock(r0, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x5, 0x7})
fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x1, 0x2, 0x0, 0x80000000})
recvmsg(r0, &(0x7f0000000280)={&(0x7f00000021c0)=@nfc, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000002340)=""/231, 0xe7}, 0x40010000)
getresgid(&(0x7f0000000140), &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000240)=<r2=>0x0)
accept4(r0, &(0x7f0000002440)=@llc, &(0x7f00000001c0)=0x80, 0x800)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)={0x4c, r4, 0x1, 0x70bd2b, 0x4000, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xfffffffa}, {0x6}}]}, 0x4c}}, 0x4040000)
syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000200)='./file0\x00', 0x10814, &(0x7f00000002c0)=ANY=[@ANYBLOB='umask=00000000000000000000000,flush,nodots,dots,gid=', @ANYRESDEC=r2, @ANYRES8=r1, @ANYRES16, @ANYBLOB="1500bba7d41fabba4332de3ca642acf6f8de847e3f21783608008708a887d30aaf0a14b0691d48445fe3b4d1ddde1b81337b2c3b5f88535d7f6fa931b84783704494cebe49ca9f6269b05edde0246c360d0566b4056f0f02ccab035d3d0a5cde0b31bd424949fe23c0a0a25691738006c5c6acdf101fecdb4f79abdfb95c6afaea03dd5903b5240565f31504c207a9a2aa6c8108fb973081e90412a3c6cfa3b2513693727fad9acd8108acb8b90fab033c9dac0dc3e5a61c513e7b5edc5d76320f0e54045ea2b7b8fb1f78d3d346e26ee5ed6926cea1ffe0a1"], 0x1, 0x1fa, &(0x7f0000000500)="$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")
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r5 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
ftruncate(r5, 0x2007ffc)

382.638971ms ago: executing program 2 (id=1802):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @broadcast})
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f2f8db0", 0x1b}, {&(0x7f0000000100)="08f2bf2aab80006558", 0x9}], 0x2)

338.63335ms ago: executing program 4 (id=1803):
syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x0)

299.99913ms ago: executing program 4 (id=1804):
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd0000001000020004001000080001", 0x53}], 0x1)

280.37159ms ago: executing program 4 (id=1805):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
sendmsg$nl_route(r0, 0x0, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0xfff, @local, 0x9}, {0xa, 0x4e22, 0xd, @loopback, 0x3}, r3, 0x40}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0xfffd, 0x0, @empty, 0x4}, {0xa, 0x0, 0x0, @empty, 0xfffffffc}, r3}}, 0x48)
r4 = dup2(r2, r2)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r4, &(0x7f00000008c0)={0x16, 0x98, 0xfa00, {0x0, 0x2, r3, 0x10, 0x0, @in={0x2, 0x4e22, @loopback}}}, 0xa0)
r5 = gettid()
timer_create(0xeae0d1814e5870d5, &(0x7f0000533fa0)={0x0, 0x28, 0x4, @tid=r5}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0)
ioperm(0x1, 0x8, 0x9)

228.55387ms ago: executing program 2 (id=1806):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x1})
fcntl$lock(r0, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x5, 0x7})
fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x1, 0x2, 0x0, 0x80000000})
recvmsg(r0, &(0x7f0000000280)={&(0x7f00000021c0)=@nfc, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000002340)=""/231, 0xe7}, 0x40010000)
getresgid(&(0x7f0000000140), &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000240)=<r2=>0x0)
accept4(r0, &(0x7f0000002440)=@llc, &(0x7f00000001c0)=0x80, 0x800)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)={0x4c, r4, 0x1, 0x70bd2b, 0x4000, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xfffffffa}, {0x6}}]}, 0x4c}}, 0x4040000)
syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000200)='./file0\x00', 0x10814, &(0x7f00000002c0)=ANY=[@ANYBLOB='umask=00000000000000000000000,flush,nodots,dots,gid=', @ANYRESDEC=r2, @ANYRES8=r1, @ANYRES16, @ANYBLOB="1500bba7d41fabba4332de3ca642acf6f8de847e3f21783608008708a887d30aaf0a14b0691d48445fe3b4d1ddde1b81337b2c3b5f88535d7f6fa931b84783704494cebe49ca9f6269b05edde0246c360d0566b4056f0f02ccab035d3d0a5cde0b31bd424949fe23c0a0a25691738006c5c6acdf101fecdb4f79abdfb95c6afaea03dd5903b5240565f31504c207a9a2aa6c8108fb973081e90412a3c6cfa3b2513693727fad9acd8108acb8b90fab033c9dac0dc3e5a61c513e7b5edc5d76320f0e54045ea2b7b8fb1f78d3d346e26ee5ed6926cea1ffe0a1"], 0x1, 0x1fa, &(0x7f0000000500)="$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")
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r5 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
ftruncate(r5, 0x2007ffc)

194.0579ms ago: executing program 3 (id=1807):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
sendmsg$nl_route(r0, 0x0, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0xfff, @local, 0x9}, {0xa, 0x4e22, 0xd, @loopback, 0x3}, r3, 0x40}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0xfffd, 0x0, @empty, 0x4}, {0xa, 0x0, 0x0, @empty, 0xfffffffc}, r3}}, 0x48)
r4 = dup2(r2, r2)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r4, &(0x7f00000008c0)={0x16, 0x98, 0xfa00, {0x0, 0x2, r3, 0x10, 0x0, @in={0x2, 0x4e22, @loopback}}}, 0xa0)
r5 = gettid()
timer_create(0xeae0d1814e5870d5, &(0x7f0000533fa0)={0x0, 0x28, 0x4, @tid=r5}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0)
ioperm(0x1, 0x8, 0x9)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r8}, 0x10)
r9 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000bc0)="0100000200373a4541062101a59ea940d2cb0b36b8f5020000a00000050000000000eb000000a5e5be21c44e328e68f3922af831e4e51bfb30f7788fd57e51bc464355bd646d037ccc16ddb08a7b3a697aedb66ddd793acf37119e61f502d8bbb016f701890700000068d945af468c1c9090c76906b94e0f27761c75e58c82da54d010078660684a4106855beaf5e813ed18aa4acabb5bee7f082d24a16b01fc91471eba59152e716af8776ab90ac48bcbee6570df22513808ecab7a9680aa613a56aa11bfa73af4c4e94b5cfc855f0e910186d7e68ac24f8b125140ac5f7f4819168ce1c25550c6773b41011999d8d9827757d96c5e8aa4617cc54c5e67060a92661f84e698d1fe", 0x108, r9)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000ffffffff7a0af0fff8ffff5979a4f0ff00000000b7060000ffffffff2d6405000000000065040400014741001404000001007d60b7030000000000006a0a00fe40000900850000001f000000b70000000004000095000000000000006623848adf1dc9a764ab51a064e0ff0c9b27a26293fddf0180000071ff31f1622271d5518193e09483c5a020c334f8c76334d8ce8303b01ddaa52e8756ad60a07d6f27c125e16d024098f755d8583da60f27c162dbba0700002ac9170f50f2568836077b7f711a18ebf608d87b885297b6a79819782748b376358c33c9f53bfd989b1ca58949a54d5827df14feecea46408a05d572077f1252fbb72c3d099c501bc4ded6fca17a3447222c95edb47b77aafa63b9dd5fa5c53e9c37251709f1ff7f0000f07bf7f53ce129a9ecd3b4dd15100f2b450f98526a0d8cac7c97fc2f64015306a1bd7e43fe1ca8345710fb6379b4c53cf55eefb4c0974486a8d25a363adbd83b49e13fbd1777b27020bd9b8cff3f48c9411670c34f23ab8caf7851b290feb3045a1b622f20c4383a0280f040de7667f8b1d0842835e81c358ebe73af41e5b5b924275cb1749289b44e9728e7a73f148ac8206afe120c1437490d99000000110000fdffffffffffffffaf580278e1342aabd1b623f6c4f128858e4eb6b42f2173184c2b99b645f6ec0e14e5d7c95a0008000000f30f6c0000000000ff0000b8f5001a1d2a34dc0973ec302bc23211d3e3b6e6dad65a51e5497a3419cecec38126247b2f113ad4c7915c8f82c333a7b350802f0311807010d1ed50c18411aa6900daccc02f4ba4b078f07e41f781eee222c7d071d5a94d82ca9a0846c1af59cee16639b4970f8f0a82c6a712fd5722d637d406160ffaffffffb4e0bde6749aa52c408b74251914c5d3255fd88a42e7ebb69ebcd8eee623e51dbb1f1b548c91a6825c0686fdc16be1cbb72c217fda18bd746253ca66093daf35923300b600000000ac376e0a4649a8a84e1d293a6b109c5e59b366bca5cc3d936c53d4a48c05099e6fc36d5aa23bff8cce0600fcff00000300a568a8532623d12b40b50ac26f2e8255470a04bfbe7acb581b90991d965a01d1f84cb6b973558e1e3f8118c77ccf0b3c6eb6443870004da10c75723b65f83769ad1f0e4ef6b9ef1cec23264fd8fdac6264af1cb467020bdc12b797b6c156c439105829d2ae1c45f7cfa40df68fd36a03353a55a8a89b60317cd78ea1dc8e0f77f2c1e68ec7c01bd5a2028a8fc107007f3deb1f200abe1f753754678dae8b4e3ba3d086d4b95dfc5817e3dafae2d38b522f942cc750399d90296171fdb1e05882f8a4b8fbd219ccac3a895828b4f22b6527ce31ceb02b7b2b4492510134552f0b076b168394f8417f25cc82ae04007193cbe69de8bf35e4bebd15412426b2e20ab1f05fc44ae9ae094c1b81d3ef947692b44d2afb09c7498dedf0f87c38bbcab7357836f03e8a7c392e535694a3ead2de11e6b1781e2a018c0ada7bc7f0eb2d678f23c07ac341fda2e563ee95085742f5fee9f95f4741b226e428d20b00bc140000e4b2f5efd0a0b1ceba000830ba8634b5aa26bdbe91614e92fae3c7349531df9bf4c01ebf5d8eb7d53e5f30647661623fbdb3f60033fc32f68ea86a2df1e76fe27dfdff1cf9194849c4cc0da9533e5983693e526a7dc0d8728f3b573ca4427bdb44df9341e9b8050e896598a156c935c800436a312e7ae3c011e46851ac599f0427729ab9c55ae0ab4c0000000000000000000000000000c87bcc2ac5aed9247b51d92e0993af4beaf1f3f47dcdfab9165f98155d93e383d6b85158b54675c1585037508c1e9461a1c3d1a6e2002045cae150a7016f1a90716eebbdf6afc4414d900be0bdf19f4a273f44f4357380b4387f1c8b104f0e406b2f04e5ed88631be6411f9927fe9f6b43ec83412b7c5a676ceec8b454ebf6481c98e86b6933a02daea0b4ec0be5b3d916bd70208b4588626c277648475002e2c62681bd07331422a6e47bbd40857d52c4894944fae5c500000000000000ff00000000de784314b8fd419216b48d0f353c11ae185749fa9ac7dfa16bc5c23a23f74b17a7f1b2d799480f33faa3537a910d6ca02f48b0e69beb1119f106ea5919ffff72e17a5dc8c3d131d82f067e29dc39665dff39fb6347b374aaaf6e65efde3fc6202bf29ccfcb08caf18d668a462493aa82e76affba9c9af31d1c23237aa6eccfadfaf794bb1004c07b21ac6ed77718098b2f722bd05fea3561b86b2838a8de5b4f91d6aba95dc9f4464a024be4d0d8d04f5023e7e19e503624d39a43c7b310de519b40738ff9a623065c06d69d16d4a46ff300022fee47803989b7e916254e0fb9e1c8b07d8a4b8b692a75a32e6ed2caeaa7c258c47fe6143cd9e90b801eff78cd4e402374e0e4ca07b7f17254e3d2f0a2a1bac6fde8a15e3ef3588065524d41966fb3915e804c53201efee751ec294584d23d9008bdf046f55c030ab941a0b8723412127efb3eac0ccf68133c76770d5e7dabcc48d47685404cc540535ed70df75c24660d85f9c9a245185c7da217d1c3743db85db67b9b8a8f00af02367429f6f0b53c169c4356751bf68745dbde055e1722ae256ae53ae637a1431855d16dfa91d82a021a4b2dbb50bf6d59fdd0c9bc84cd7d544de2523b6ce8aaeb94bfba75079f7455204ccca02bd389d8409b2effe9b88e301ac4fe28752386a0678a3f54b2bdf56f927ddd6b0ac98b2b505f668597455ada51ba95ab852b49373a11ff153d20f3681f7a3a31dcd82474b51498f65e0601bcdd23acb4c01bcd2f3e1ad378d14c07d923087d3518369710b70ffb0b523dc4f00f275c381fe1c091e478b04d5e4a9f75b4072acb005a83c25625ab7a351a68977177e27a1bf112114eb10250c2b9dca234f8967f0439696a2345e747b5f1d8c4bec86d8e8f2eb121ea0159615e7d475d45837921c2c0c3f9e683ac8000214a657c9f"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r10, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
fgetxattr(0xffffffffffffffff, &(0x7f00000002c0)=@known='security.selinux\x00', 0x0, 0x0)
r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000df0300000000000000000000000000000000000087c8c02327922eadfaf3840aa781b9dd23653a3b7d4fca151d2748c20fe01ed2e1a39e9e0d5702aaa78fa7ad20790c92b8cef9e77a103a96cabb79835f8857311d5250488bb4f38d7213791c3c0f9d119dea026f304db3be5224a060d3295f429aa04f9196f1234729d28543f90ef987d40809cadc62ba438f49f3a9c933a5751c1c6bb3d22ab7e9e3fce1223974e97b2fa5a5d0744f29991212db1050bcaa30e2eb87eb54da39c55e4380ebbee24be76f7f61dd9de560e3ab447dbe16e9064e567021a0ab31c122eb64574f4edd8b881377338bbedf40c54f247ed4144c5e"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000d60000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

107.720469ms ago: executing program 1 (id=1809):
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000001000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10)
r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0)
ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000080)=0x14)
ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f00000000c0)=0x32)
close(r1)

107.53197ms ago: executing program 1 (id=1810):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x18}, {{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

76.894399ms ago: executing program 1 (id=1811):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x220, [0x0, 0x0, 0x0, 0x9, 0x0, 0x20000500], 0x7, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}, 0x298)

76.44962ms ago: executing program 1 (id=1812):
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x4, 0x7, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

30.643689ms ago: executing program 1 (id=1813):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000240)='kfree\x00', r0}, 0x18)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r1)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="be90e5a91b4f12abedf217b7de691e2a40020982a5a1d7dfaa1028301a240fdfa82de4a13e4056f61b767f929c58d931a5968cb474de655eded1d541dc11dc07e98c4a03423971eab6362da5e7e16502b44ba004755188e7a5ce06d71a594ac01297d1d39b95c89ad843a8ff59a5b758f83f32503ce2286076083cde6a3702aa9ea0471bfed0063f79df0a70d17a93471a1c6d649f5c8734fb110121ebe40fddeb66cedc6bf553d728ab920d3c25c4fd6062ba56324cb7c2589e4ea405858a7dd42bf6df1c9d58e90b", @ANYRES16=r2, @ANYBLOB="01000000000000000000060000002800070073797374656d5f753a6f626a6563745f723a756465765f7661725f72756e5f743a73300014000300fe8000000000000000400000000000bb140002"], 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x20000040)

30.387169ms ago: executing program 1 (id=1814):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xa0242, 0x0)
pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x42)
sendfile(r2, r2, 0x0, 0x80000000)

30.090719ms ago: executing program 0 (id=1815):
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd0000001000020004001000080001", 0x53}], 0x1)

10.088569ms ago: executing program 2 (id=1816):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r1}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000fdff01000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000300c0009800800014044"], 0x90}}, 0x0)

0s ago: executing program 0 (id=1817):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000857b29a60edb0000000000002000000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400000bb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r2}, 0x18)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff010000000000000700000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000001000007b8af8ff000000ccbfa200000000000007020000f8ffffffb7030000d7cdbb5d3f9c95d86df1a108000000b7050000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
write$binfmt_elf64(r5, &(0x7f0000000f40)=ANY=[@ANYBLOB="c5b09bc253f82adf3f45b8154b67de08aab56b1a5e705b6d2973948add752970fb37bf311c411a9664bf41d27314ec5ad7c923f23a05e14590bc3ef4fe9b68ae256d3b0bfc7964eb244d24c3737f0b80c2a09c17cb3a81bc917c05068d4e189ac3d780deb957b00125ae3b08"], 0x19)
close(r5)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0)
socket$inet6(0xa, 0x6, 0x5)
perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x0, 0x0, 0x10, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x5, 0x6}, 0x11a434, 0x4, 0x4, 0x8, 0x0, 0xfffffffe, 0xffff}, 0x0, 0x2000000000000000, 0xffffffffffffffff, 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00'}, 0x10)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file0\x00', 0x0, &(0x7f0000000c80)={[{@nombcache}, {@usrjquota}, {@errors_remount}, {@dioread_lock}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@mblk_io_submit}, {@minixdf}, {@barrier_val}, {@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {}]}, 0x45, 0x7b1, &(0x7f00000004c0)="$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")
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0)
write$binfmt_script(r6, &(0x7f0000000040), 0x208e24b)

kernel console output (not intermixed with test programs):

yz.1.1157" path="/dev/input/event0" dev="devtmpfs" ino=242 ioctlcmd=0x450a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  102.340687][ T6747] EXT4-fs: Ignoring removed oldalloc option
[  102.384264][ T6747] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  102.418473][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.430141][ T6752] SELinux: syz.1.1160 (6752) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  102.462246][ T6754] syzkaller1: entered promiscuous mode
[  102.467912][ T6754] syzkaller1: entered allmulticast mode
[  102.577576][ T6760] loop4: detected capacity change from 0 to 2048
[  102.608594][ T6760] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  102.630015][   T29] audit: type=1400 audit(1734771237.100:3889): avc:  denied  { execute } for  pid=6759 comm="syz.4.1164" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  102.654556][ T6760] netlink: 'syz.4.1164': attribute type 10 has an invalid length.
[  102.655633][   T29] audit: type=1400 audit(1734771237.130:3890): avc:  denied  { execute_no_trans } for  pid=6759 comm="syz.4.1164" path="/273/file0/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  102.686513][ T6760] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  102.706504][ T6767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  102.715081][ T6767] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  102.732588][ T6767] syz.3.1166[6767] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  102.732858][ T6767] syz.3.1166[6767] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  102.737701][ T6769] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  102.744408][ T6767] syz.3.1166[6767] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  102.778114][ T6155] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  102.807291][ T6155] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  102.819689][ T6155] EXT4-fs (loop4): This should not happen!! Data will be lost
[  102.819689][ T6155] 
[  102.829543][ T6155] EXT4-fs (loop4): Total free blocks count 0
[  102.835725][ T6155] EXT4-fs (loop4): Free/Dirty block details
[  102.841632][ T6155] EXT4-fs (loop4): free_blocks=2415919104
[  102.847500][ T6155] EXT4-fs (loop4): dirty_blocks=16
[  102.852669][ T6155] EXT4-fs (loop4): Block reservation details
[  102.858777][ T6155] EXT4-fs (loop4): i_reserved_data_blocks=1
[  102.865983][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.977152][ T6777] loop4: detected capacity change from 0 to 512
[  103.006038][ T6777] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  103.019939][ T6777] ext4 filesystem being mounted at /277/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  103.062102][ T6781] FAULT_INJECTION: forcing a failure.
[  103.062102][ T6781] name failslab, interval 1, probability 0, space 0, times 0
[  103.075133][ T6781] CPU: 0 UID: 0 PID: 6781 Comm: syz.2.1171 Not tainted 6.13.0-rc3-syzkaller-00193-ge9b8ffafd20a #0
[  103.085921][ T6781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  103.096084][ T6781] Call Trace:
[  103.099419][ T6781]  <TASK>
[  103.102534][ T6781]  dump_stack_lvl+0xf2/0x150
[  103.107161][ T6781]  dump_stack+0x15/0x1a
[  103.111404][ T6781]  should_fail_ex+0x223/0x230
[  103.116149][ T6781]  should_failslab+0x8f/0xb0
[  103.121116][ T6781]  kmem_cache_alloc_noprof+0x52/0x320
[  103.126563][ T6781]  ? alloc_empty_file+0xd0/0x200
[  103.131610][ T6781]  ? _raw_spin_unlock+0x26/0x50
[  103.136501][ T6781]  alloc_empty_file+0xd0/0x200
[  103.141303][ T6781]  alloc_file_pseudo+0xc3/0x140
[  103.146183][ T6781]  sock_alloc_file+0x9b/0x1c0
[  103.150915][ T6781]  do_accept+0x1e3/0x390
[  103.155319][ T6781]  __sys_accept4+0xc3/0x150
[  103.159866][ T6781]  __x64_sys_accept4+0x53/0x60
[  103.164652][ T6781]  x64_sys_call+0x2824/0x2dc0
[  103.169368][ T6781]  do_syscall_64+0xc9/0x1c0
[  103.173978][ T6781]  ? clear_bhb_loop+0x55/0xb0
[  103.178704][ T6781]  ? clear_bhb_loop+0x55/0xb0
[  103.183540][ T6781]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  103.189571][ T6781] RIP: 0033:0x7f8d6d365d29
[  103.194024][ T6781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  103.213734][ T6781] RSP: 002b:00007f8d6b9d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000120
[  103.222186][ T6781] RAX: ffffffffffffffda RBX: 00007f8d6d555fa0 RCX: 00007f8d6d365d29
[  103.230246][ T6781] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006
[  103.238234][ T6781] RBP: 00007f8d6b9d7090 R08: 0000000000000000 R09: 0000000000000000
[  103.246237][ T6781] R10: 0000000000080800 R11: 0000000000000246 R12: 0000000000000001
[  103.254268][ T6781] R13: 0000000000000000 R14: 00007f8d6d555fa0 R15: 00007ffe0c0565b8
[  103.262309][ T6781]  </TASK>
[  103.285521][   T29] audit: type=1400 audit(1734771237.750:3891): avc:  denied  { write } for  pid=2981 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  103.299844][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.307109][   T29] audit: type=1400 audit(1734771237.750:3892): avc:  denied  { remove_name } for  pid=2981 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  103.338674][   T29] audit: type=1400 audit(1734771237.750:3893): avc:  denied  { rename } for  pid=2981 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  103.361150][   T29] audit: type=1400 audit(1734771237.750:3894): avc:  denied  { add_name } for  pid=2981 comm="syslogd" name="messages.0" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  103.442479][ T6787] loop4: detected capacity change from 0 to 512
[  103.451987][ T6787] journal_path: Non-blockdev passed as './file0'
[  103.458476][ T6787] EXT4-fs: error: could not find journal device path
[  103.537088][ T6794] loop3: detected capacity change from 0 to 1024
[  103.546382][ T6794] EXT4-fs: Ignoring removed oldalloc option
[  103.584027][ T6794] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  103.645391][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.783575][ T6811] loop3: detected capacity change from 0 to 2048
[  103.798326][ T6811] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  103.835618][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.976892][ T6827] loop3: detected capacity change from 0 to 512
[  103.986595][ T6827] journal_path: Non-blockdev passed as './file0'
[  103.993126][ T6827] EXT4-fs: error: could not find journal device path
[  104.100990][ T6830] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  104.232460][ T6833] __nla_validate_parse: 5 callbacks suppressed
[  104.232482][ T6833] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1189'.
[  104.359937][ T6838] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1191'.
[  104.395927][ T6840] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2049 sclass=netlink_route_socket pid=6840 comm=syz.1.1192
[  104.428852][ T6840] pim6reg: entered allmulticast mode
[  104.437286][ T6840] pim6reg: left allmulticast mode
[  104.765047][ T6865] loop4: detected capacity change from 0 to 1024
[  104.772830][ T6865] EXT4-fs: Ignoring removed oldalloc option
[  104.795744][ T6865] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  104.846880][ T6878] FAULT_INJECTION: forcing a failure.
[  104.846880][ T6878] name failslab, interval 1, probability 0, space 0, times 0
[  104.859715][ T6878] CPU: 1 UID: 0 PID: 6878 Comm: syz.0.1195 Not tainted 6.13.0-rc3-syzkaller-00193-ge9b8ffafd20a #0
[  104.870525][ T6878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  104.880829][ T6878] Call Trace:
[  104.884193][ T6878]  <TASK>
[  104.887234][ T6878]  dump_stack_lvl+0xf2/0x150
[  104.891882][ T6878]  dump_stack+0x15/0x1a
[  104.896111][ T6878]  should_fail_ex+0x223/0x230
[  104.900900][ T6878]  should_failslab+0x8f/0xb0
[  104.905585][ T6878]  kmem_cache_alloc_noprof+0x52/0x320
[  104.910992][ T6878]  ? __se_sys_getcwd+0x44/0x3d0
[  104.915970][ T6878]  __se_sys_getcwd+0x44/0x3d0
[  104.920712][ T6878]  ? __secure_computing+0x9f/0x1c0
[  104.925932][ T6878]  __x64_sys_getcwd+0x31/0x40
[  104.930675][ T6878]  x64_sys_call+0x1f29/0x2dc0
[  104.935413][ T6878]  do_syscall_64+0xc9/0x1c0
[  104.939994][ T6878]  ? clear_bhb_loop+0x55/0xb0
[  104.944715][ T6878]  ? clear_bhb_loop+0x55/0xb0
[  104.949473][ T6878]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  104.955551][ T6878] RIP: 0033:0x7f018b285d29
[  104.960088][ T6878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  104.980001][ T6878] RSP: 002b:00007f01898f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000004f
[  104.988565][ T6878] RAX: ffffffffffffffda RBX: 00007f018b475fa0 RCX: 00007f018b285d29
[  104.996621][ T6878] RDX: 0000000000000000 RSI: 0000000000000014 RDI: 0000000020000140
[  105.004677][ T6878] RBP: 00007f01898f7090 R08: 0000000000000000 R09: 0000000000000000
[  105.012680][ T6878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  105.020720][ T6878] R13: 0000000000000000 R14: 00007f018b475fa0 R15: 00007ffc3540e568
[  105.028733][ T6878]  </TASK>
[  105.037458][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.087389][ T6906] loop3: detected capacity change from 0 to 512
[  105.115966][ T6906] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  105.141499][ T6906] ext4 filesystem being mounted at /254/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  105.155949][ T6919] geneve0: entered allmulticast mode
[  105.189330][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.219135][ T6925] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1202'.
[  105.261894][ T6933] netlink: 664 bytes leftover after parsing attributes in process `+}[@'.
[  105.284252][ T6937] loop2: detected capacity change from 0 to 512
[  105.292964][ T6937] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  105.317349][ T6937] EXT4-fs (loop2): 1 truncate cleaned up
[  105.325427][ T6937] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  105.328294][ T6943] loop0: detected capacity change from 0 to 1024
[  105.349113][ T6943] EXT4-fs: Ignoring removed oldalloc option
[  105.384495][ T6943] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  105.515141][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.604396][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.658671][ T7006] loop2: detected capacity change from 0 to 512
[  105.667409][ T7007] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1211'.
[  105.677904][ T7006] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  105.690519][ T7007] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1211'.
[  105.711155][ T7007] loop0: detected capacity change from 0 to 1024
[  105.726617][ T7006] EXT4-fs error (device loop2): ext4_orphan_get:1389: inode #15: comm syz.2.1209: iget: bad extra_isize 7 (inode size 256)
[  105.741546][ T7006] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.1209: couldn't read orphan inode 15 (err -117)
[  105.756170][ T7007] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  105.768759][ T7006] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  105.779526][ T7007] ext4 filesystem being mounted at /228/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  105.807445][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.844845][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.864629][ T7018] syz.2.1216[7018] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  105.864837][ T7018] syz.2.1216[7018] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  105.880889][ T7018] syz.2.1216[7018] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  105.894820][ T7020] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1215'.
[  105.991950][ T7033] SELinux: syz.1.1221 (7033) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  106.010484][ T7039] loop4: detected capacity change from 0 to 164
[  106.026770][ T7039] rock: corrupted directory entry. extent=41, offset=65536, size=8
[  106.149701][ T7053] can0: slcan on ptm0.
[  106.194258][ T7046] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.241885][ T7061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1229'.
[  106.283653][ T7052] can0 (unregistered): slcan off ptm0.
[  106.290426][ T7046] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.318247][ T7069] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1240'.
[  106.358713][ T7074] loop2: detected capacity change from 0 to 512
[  106.374735][ T7074] EXT4-fs error (device loop2): ext4_get_journal_inode:5809: inode #32: comm syz.2.1231: iget: special inode unallocated
[  106.401104][ T7074] EXT4-fs (loop2): Remounting filesystem read-only
[  106.407814][ T7074] EXT4-fs (loop2): no journal found
[  106.413194][ T7074] EXT4-fs (loop2): can't get journal size
[  106.420775][ T7046] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.433845][ T7074] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended
[  106.449345][ T7074] EXT4-fs (loop2): failed to initialize system zone (-117)
[  106.467310][ T7074] EXT4-fs (loop2): mount failed
[  106.482723][ T7046] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.525536][ T7087] loop2: detected capacity change from 0 to 1024
[  106.560271][ T7046] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  106.570871][ T7087] EXT4-fs: Ignoring removed oldalloc option
[  106.598969][ T7046] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  106.616107][ T7087] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  106.631327][ T7046] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  106.662758][ T7046] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  106.715928][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.795340][ T7108] syz.2.1233[7108] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  106.795406][ T7108] syz.2.1233[7108] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  106.818589][ T7108] syz.2.1233[7108] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  106.849009][ T7108] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1233'.
[  107.213802][   T29] kauditd_printk_skb: 3972 callbacks suppressed
[  107.213821][   T29] audit: type=1326 audit(1734771241.680:7867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7036 comm="syz.4.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f350b77cce7 code=0x7ffc0000
[  107.243668][   T29] audit: type=1326 audit(1734771241.680:7868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7036 comm="syz.4.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f350b721f29 code=0x7ffc0000
[  107.267272][   T29] audit: type=1326 audit(1734771241.680:7869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7036 comm="syz.4.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f350b77cce7 code=0x7ffc0000
[  107.290711][   T29] audit: type=1326 audit(1734771241.680:7870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7036 comm="syz.4.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f350b721f29 code=0x7ffc0000
[  107.314225][   T29] audit: type=1326 audit(1734771241.740:7871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7036 comm="syz.4.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f350b77cce7 code=0x7ffc0000
[  107.337837][   T29] audit: type=1326 audit(1734771241.740:7872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7036 comm="syz.4.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f350b721f29 code=0x7ffc0000
[  107.361393][   T29] audit: type=1326 audit(1734771241.740:7873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7036 comm="syz.4.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f350b77cce7 code=0x7ffc0000
[  107.385601][   T29] audit: type=1326 audit(1734771241.740:7874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7036 comm="syz.4.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f350b721f29 code=0x7ffc0000
[  107.409191][   T29] audit: type=1326 audit(1734771241.740:7875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7036 comm="syz.4.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f350b77cce7 code=0x7ffc0000
[  107.432549][   T29] audit: type=1326 audit(1734771241.740:7876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7036 comm="syz.4.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f350b721f29 code=0x7ffc0000
[  107.619950][ T7129] netlink: 'syz.0.1243': attribute type 9 has an invalid length.
[  107.719498][ T7133] syzkaller1: entered promiscuous mode
[  107.725125][ T7133] syzkaller1: entered allmulticast mode
[  107.745757][ T7135] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2049 sclass=netlink_route_socket pid=7135 comm=syz.0.1246
[  107.781723][ T7135] pim6reg: entered allmulticast mode
[  107.790143][ T7134] pim6reg: left allmulticast mode
[  107.927552][ T7143] loop0: detected capacity change from 0 to 512
[  107.962361][ T7147] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2049 sclass=netlink_route_socket pid=7147 comm=syz.2.1252
[  107.967897][ T7143] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  107.999812][ T7143] ext4 filesystem being mounted at /239/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  108.033444][ T7156] netlink: 'syz.1.1255': attribute type 9 has an invalid length.
[  108.235529][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.283671][ T7165] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  108.594438][ T7177] x_tables: ip6_tables: sctp match: only valid for protocol 132
[  108.860114][ T7182] syzkaller1: entered promiscuous mode
[  108.865821][ T7182] syzkaller1: entered allmulticast mode
[  108.913988][ T7184] loop0: detected capacity change from 0 to 512
[  108.944456][ T7184] EXT4-fs (loop0): 1 truncate cleaned up
[  108.950709][ T7184] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  108.978155][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  109.040751][ T7192] netlink: 'syz.2.1268': attribute type 9 has an invalid length.
[  109.053912][ T7188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  109.063566][ T7188] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  109.073360][ T7194] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2049 sclass=netlink_route_socket pid=7194 comm=syz.4.1269
[  109.080684][ T7188] syz.0.1266[7188] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  109.086254][ T7188] syz.0.1266[7188] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  109.107545][ T7188] syz.0.1266[7188] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  109.120175][ T7197] FAULT_INJECTION: forcing a failure.
[  109.120175][ T7197] name failslab, interval 1, probability 0, space 0, times 0
[  109.144443][ T7197] CPU: 1 UID: 0 PID: 7197 Comm: syz.3.1271 Not tainted 6.13.0-rc3-syzkaller-00193-ge9b8ffafd20a #0
[  109.155239][ T7197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  109.165559][ T7197] Call Trace:
[  109.168889][ T7197]  <TASK>
[  109.171868][ T7197]  dump_stack_lvl+0xf2/0x150
[  109.176508][ T7197]  dump_stack+0x15/0x1a
[  109.180775][ T7197]  should_fail_ex+0x223/0x230
[  109.185580][ T7197]  should_failslab+0x8f/0xb0
[  109.190290][ T7197]  __kmalloc_noprof+0xab/0x3f0
[  109.195151][ T7197]  ? bpf_test_init+0xc7/0x170
[  109.199954][ T7197]  bpf_test_init+0xc7/0x170
[  109.204490][ T7197]  bpf_prog_test_run_xdp+0x321/0x8b0
[  109.209905][ T7197]  ? __rcu_read_unlock+0x4e/0x70
[  109.214887][ T7197]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  109.220742][ T7197]  bpf_prog_test_run+0x20f/0x3a0
[  109.225886][ T7197]  __sys_bpf+0x400/0x7a0
[  109.230177][ T7197]  __x64_sys_bpf+0x43/0x50
[  109.234753][ T7197]  x64_sys_call+0x2914/0x2dc0
[  109.239440][ T7197]  do_syscall_64+0xc9/0x1c0
[  109.243957][ T7197]  ? clear_bhb_loop+0x55/0xb0
[  109.248728][ T7197]  ? clear_bhb_loop+0x55/0xb0
[  109.253428][ T7197]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  109.259494][ T7197] RIP: 0033:0x7f6460475d29
[  109.264105][ T7197] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  109.283768][ T7197] RSP: 002b:00007f645eae1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  109.292531][ T7197] RAX: ffffffffffffffda RBX: 00007f6460665fa0 RCX: 00007f6460475d29
[  109.300806][ T7197] RDX: 0000000000000050 RSI: 0000000020000600 RDI: 000000000000000a
[  109.308852][ T7197] RBP: 00007f645eae1090 R08: 0000000000000000 R09: 0000000000000000
[  109.316843][ T7197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  109.324832][ T7197] R13: 0000000000000000 R14: 00007f6460665fa0 R15: 00007ffccb27e1b8
[  109.332927][ T7197]  </TASK>
[  109.366172][ T7198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  109.374711][ T7198] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  109.381987][ T7200] loop3: detected capacity change from 0 to 1024
[  109.389897][ T7200] EXT4-fs: Ignoring removed oldalloc option
[  109.396911][ T7198] syz.2.1270[7198] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  109.396980][ T7198] syz.2.1270[7198] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  109.413276][ T7198] syz.2.1270[7198] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  109.429756][ T7200] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  109.498068][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  109.537258][ T7213] 9pnet: p9_errstr2errno: server reported unknown error ���
[  109.680125][ T7221] __nla_validate_parse: 7 callbacks suppressed
[  109.680146][ T7221] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1279'.
[  109.738009][ T7224] syzkaller1: entered promiscuous mode
[  109.743587][ T7224] syzkaller1: entered allmulticast mode
[  109.752591][ T7226] netlink: 'syz.1.1280': attribute type 9 has an invalid length.
[  109.760799][ T7226] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1280'.
[  110.285110][ T7241] netlink: 133492 bytes leftover after parsing attributes in process `syz.0.1287'.
[  110.334828][ T7251] netlink: 'syz.2.1292': attribute type 9 has an invalid length.
[  110.342675][ T7251] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1292'.
[  110.376898][ T7256] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2049 sclass=netlink_route_socket pid=7256 comm=syz.2.1293
[  110.383618][ T7252] loop4: detected capacity change from 0 to 512
[  110.508579][ T7252] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  110.527442][ T7252] ext4 filesystem being mounted at /299/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  110.623446][ T7272] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1299'.
[  110.647818][ T7272] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  110.656125][ T7272] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  110.664480][ T7272] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  110.672916][ T7272] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  110.681920][ T7272] vxlan0: entered promiscuous mode
[  110.729498][ T7252] infiniband syz!: set active
[  110.734524][ T7252] infiniband syz!: added team_slave_0
[  110.742344][ T7286] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1300'.
[  110.757632][ T7252] RDS/IB: syz!: added
[  110.761841][ T7288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1302'.
[  110.762953][ T7252] smc: adding ib device syz! with port count 1
[  110.777354][ T7252] smc:    ib device syz! port 1 has pnetid 
[  110.808867][ T7275] batadv_slave_0: left promiscuous mode
[  110.816808][ T7275] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  110.843835][ T7275] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  110.852777][ T7275] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  110.862062][ T7275] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  110.871253][ T7275] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  110.947280][ T7293] netlink: 'syz.3.1304': attribute type 9 has an invalid length.
[  110.955099][ T7293] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1304'.
[  110.997120][ T7299] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2049 sclass=netlink_route_socket pid=7299 comm=syz.2.1309
[  111.200480][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  111.798939][ T7336] loop4: detected capacity change from 0 to 128
[  111.843407][ T7338] FAULT_INJECTION: forcing a failure.
[  111.843407][ T7338] name failslab, interval 1, probability 0, space 0, times 0
[  111.856284][ T7338] CPU: 1 UID: 0 PID: 7338 Comm: syz.2.1321 Not tainted 6.13.0-rc3-syzkaller-00193-ge9b8ffafd20a #0
[  111.866988][ T7338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  111.877071][ T7338] Call Trace:
[  111.880386][ T7338]  <TASK>
[  111.883467][ T7338]  dump_stack_lvl+0xf2/0x150
[  111.888185][ T7338]  dump_stack+0x15/0x1a
[  111.892389][ T7338]  should_fail_ex+0x223/0x230
[  111.897236][ T7338]  should_failslab+0x8f/0xb0
[  111.901875][ T7338]  kmem_cache_alloc_node_noprof+0x59/0x320
[  111.907744][ T7338]  ? __alloc_skb+0x10b/0x310
[  111.912464][ T7338]  __alloc_skb+0x10b/0x310
[  111.916959][ T7338]  __ipv6_ifa_notify+0x129/0x8f0
[  111.922443][ T7338]  ? probe_sched_wakeup+0x81/0xa0
[  111.927785][ T7338]  ? enqueue_timer+0xe7/0x2a0
[  111.932531][ T7338]  ? _raw_spin_unlock_irqrestore+0x2b/0x60
[  111.938415][ T7338]  inet6_addr_modify+0x5f0/0xcb0
[  111.943438][ T7338]  ? xas_load+0x3ae/0x3d0
[  111.947843][ T7338]  ? __rcu_read_unlock+0x4e/0x70
[  111.952846][ T7338]  ? ipv6_get_ifaddr+0x344/0x370
[  111.957912][ T7338]  inet6_rtm_newaddr+0x488/0x5a0
[  111.962903][ T7338]  ? __pfx_inet6_rtm_newaddr+0x10/0x10
[  111.968446][ T7338]  rtnetlink_rcv_msg+0x6aa/0x710
[  111.973524][ T7338]  ? avc_has_perm_noaudit+0x1cc/0x210
[  111.978974][ T7338]  netlink_rcv_skb+0x12c/0x230
[  111.983978][ T7338]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  111.989550][ T7338]  rtnetlink_rcv+0x1c/0x30
[  111.994003][ T7338]  netlink_unicast+0x599/0x670
[  111.998813][ T7338]  netlink_sendmsg+0x5cc/0x6e0
[  112.003636][ T7338]  ? __pfx_netlink_sendmsg+0x10/0x10
[  112.008987][ T7338]  __sock_sendmsg+0x140/0x180
[  112.013741][ T7338]  ____sys_sendmsg+0x312/0x410
[  112.018535][ T7338]  __sys_sendmmsg+0x227/0x4b0
[  112.023272][ T7338]  __x64_sys_sendmmsg+0x57/0x70
[  112.028211][ T7338]  x64_sys_call+0x29aa/0x2dc0
[  112.032910][ T7338]  do_syscall_64+0xc9/0x1c0
[  112.037456][ T7338]  ? clear_bhb_loop+0x55/0xb0
[  112.042203][ T7338]  ? clear_bhb_loop+0x55/0xb0
[  112.046945][ T7338]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  112.052920][ T7338] RIP: 0033:0x7f8d6d365d29
[  112.057422][ T7338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  112.077655][ T7338] RSP: 002b:00007f8d6b9d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  112.086101][ T7338] RAX: ffffffffffffffda RBX: 00007f8d6d555fa0 RCX: 00007f8d6d365d29
[  112.094594][ T7338] RDX: 04000000000001f2 RSI: 0000000020000000 RDI: 0000000000000009
[  112.102640][ T7338] RBP: 00007f8d6b9d7090 R08: 0000000000000000 R09: 0000000000000000
[  112.110692][ T7338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  112.118726][ T7338] R13: 0000000000000000 R14: 00007f8d6d555fa0 R15: 00007ffe0c0565b8
[  112.126996][ T7338]  </TASK>
[  112.172561][ T7343] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2049 sclass=netlink_route_socket pid=7343 comm=syz.4.1322
[  112.225638][   T29] kauditd_printk_skb: 1648 callbacks suppressed
[  112.225653][   T29] audit: type=1326 audit(1734771246.700:9523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7344 comm="syz.2.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8d6d365d29 code=0x7ffc0000
[  112.266027][   T29] audit: type=1326 audit(1734771246.740:9524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7344 comm="syz.2.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d6d365d29 code=0x7ffc0000
[  112.289725][   T29] audit: type=1326 audit(1734771246.740:9525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7344 comm="syz.2.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d6d365d29 code=0x7ffc0000
[  112.313255][   T29] audit: type=1326 audit(1734771246.740:9526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7344 comm="syz.2.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8d6d365d29 code=0x7ffc0000
[  112.336920][   T29] audit: type=1326 audit(1734771246.740:9527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7344 comm="syz.2.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d6d365d29 code=0x7ffc0000
[  112.360557][   T29] audit: type=1326 audit(1734771246.740:9528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7344 comm="syz.2.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d6d365d29 code=0x7ffc0000
[  112.389238][   T29] audit: type=1326 audit(1734771246.760:9529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7353 comm="syz.0.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f018b285d29 code=0x7ffc0000
[  112.413089][   T29] audit: type=1326 audit(1734771246.760:9530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7353 comm="syz.0.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f018b285d29 code=0x7ffc0000
[  112.436750][   T29] audit: type=1326 audit(1734771246.760:9531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7353 comm="syz.0.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f018b285d29 code=0x7ffc0000
[  112.461079][   T29] audit: type=1326 audit(1734771246.760:9532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7353 comm="syz.0.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f018b285d29 code=0x7ffc0000
[  112.499749][ T7358] loop2: detected capacity change from 0 to 2048
[  112.562004][ T7358]  loop2: p1 < > p4
[  112.582182][ T7358] loop2: p4 size 8388608 extends beyond EOD, truncated
[  112.595480][ T7370] loop3: detected capacity change from 0 to 512
[  112.618628][ T7368] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1333'.
[  112.729608][ T7370] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.1334: corrupted in-inode xattr: invalid ea_ino
[  112.745328][ T7370] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.1334: couldn't read orphan inode 15 (err -117)
[  112.748094][ T7384] loop0: detected capacity change from 0 to 128
[  112.758614][ T7370] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  112.785799][ T7386] FAULT_INJECTION: forcing a failure.
[  112.785799][ T7386] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  112.799188][ T7386] CPU: 0 UID: 0 PID: 7386 Comm: syz.1.1339 Not tainted 6.13.0-rc3-syzkaller-00193-ge9b8ffafd20a #0
[  112.809958][ T7386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  112.820046][ T7386] Call Trace:
[  112.823392][ T7386]  <TASK>
[  112.826362][ T7386]  dump_stack_lvl+0xf2/0x150
[  112.831146][ T7386]  dump_stack+0x15/0x1a
[  112.835339][ T7386]  should_fail_ex+0x223/0x230
[  112.840124][ T7386]  should_fail_alloc_page+0xfd/0x110
[  112.845454][ T7386]  __alloc_pages_noprof+0x109/0x340
[  112.850754][ T7386]  alloc_pages_mpol_noprof+0xb1/0x1e0
[  112.856198][ T7386]  vma_alloc_folio_noprof+0x1a0/0x2f0
[  112.861775][ T7386]  handle_mm_fault+0xdd7/0x2ac0
[  112.866653][ T7386]  ? __rcu_read_lock+0x36/0x50
[  112.871495][ T7386]  __get_user_pages+0xf2c/0x2670
[  112.876505][ T7386]  ? path_openat+0x1a5a/0x1fa0
[  112.881458][ T7386]  faultin_page_range+0x101/0x5d0
[  112.886518][ T7386]  do_madvise+0x42b/0x2a70
[  112.890968][ T7386]  ? __seccomp_filter+0x53c/0x1180
[  112.896179][ T7386]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  112.901854][ T7386]  ? __secure_computing+0x9f/0x1c0
[  112.907005][ T7386]  __x64_sys_madvise+0x61/0x70
[  112.911905][ T7386]  x64_sys_call+0x23ab/0x2dc0
[  112.916617][ T7386]  do_syscall_64+0xc9/0x1c0
[  112.921193][ T7386]  ? clear_bhb_loop+0x55/0xb0
[  112.926128][ T7386]  ? clear_bhb_loop+0x55/0xb0
[  112.930843][ T7386]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  112.936794][ T7386] RIP: 0033:0x7f4f8c8a5d29
[  112.941276][ T7386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  112.961002][ T7386] RSP: 002b:00007f4f8af17038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c
[  112.969537][ T7386] RAX: ffffffffffffffda RBX: 00007f4f8ca95fa0 RCX: 00007f4f8c8a5d29
[  112.977710][ T7386] RDX: 0000000000000017 RSI: 0000000000800000 RDI: 00000000200ec000
[  112.985878][ T7386] RBP: 00007f4f8af17090 R08: 0000000000000000 R09: 0000000000000000
[  112.993872][ T7386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  113.001863][ T7386] R13: 0000000000000000 R14: 00007f4f8ca95fa0 R15: 00007ffef39ae698
[  113.009865][ T7386]  </TASK>
[  113.109410][ T7370] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1334'.
[  113.192230][ T7393] Invalid ELF header magic: != ELF
[  113.202703][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  113.255356][ T7398] loop4: detected capacity change from 0 to 1024
[  113.265393][ T7398] EXT4-fs: Ignoring removed oldalloc option
[  113.278436][ T7398] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  113.406942][ T7403] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16498 sclass=netlink_route_socket pid=7403 comm=syz.0.1345
[  113.476223][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  113.599141][ T7420] netlink: 'syz.0.1352': attribute type 9 has an invalid length.
[  113.611427][ T7412] loop2: detected capacity change from 0 to 2048
[  113.646933][ T7412]  loop2: p1 p2 p3
[  113.673402][ T2999]  loop2: p1 p2 p3
[  113.680889][ T7424] loop0: detected capacity change from 0 to 4096
[  113.697074][ T7424] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  113.771825][ T3285] udevd[3285]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[  113.792389][ T3538] udevd[3538]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[  113.803953][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  113.856809][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  113.858193][ T3285] udevd[3285]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[  113.873684][ T7433] loop4: detected capacity change from 0 to 128
[  113.880527][ T3538] udevd[3538]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[  114.076689][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  114.134125][ T7443] loop2: detected capacity change from 0 to 1024
[  114.150802][ T7443] EXT4-fs: Ignoring removed oldalloc option
[  114.162458][ T7445] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16498 sclass=netlink_route_socket pid=7445 comm=syz.0.1360
[  114.228684][ T7443] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  114.252008][ T7449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  114.261298][ T7449] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  114.263182][ T7456] netlink: 'syz.3.1364': attribute type 9 has an invalid length.
[  114.269974][ T7449] syz.4.1362[7449] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  114.277021][ T7449] syz.4.1362[7449] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  114.288633][ T7449] syz.4.1362[7449] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  114.303454][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  114.356926][ T7465] syz.3.1368[7465] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  114.357043][ T7465] syz.3.1368[7465] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  114.373873][ T7465] syz.3.1368[7465] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  114.379291][ T7467] loop2: detected capacity change from 0 to 512
[  114.429416][ T7467] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  114.451230][ T7467] ext4 filesystem being mounted at /278/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  114.456898][ T7471] loop0: detected capacity change from 0 to 4096
[  114.486858][ T7465] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.504683][ T7465] bridge0: port 1(bridge_slave_0) entered blocking state
[  114.511804][ T7465] bridge0: port 1(bridge_slave_0) entered forwarding state
[  114.529291][ T7465] loop3: detected capacity change from 0 to 512
[  114.539124][ T7480] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7480 comm=syz.1.1372
[  114.541343][ T7471] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  114.565578][ T7476] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  114.572914][ T7476] IPv6: NLM_F_CREATE should be set when creating new route
[  114.609248][ T7465] EXT4-fs (loop3): too many log groups per flexible block group
[  114.617153][ T7465] EXT4-fs (loop3): failed to initialize mballoc (-12)
[  114.624047][ T7465] EXT4-fs (loop3): mount failed
[  114.719262][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  114.733217][ T7489] loop3: detected capacity change from 0 to 1024
[  114.740512][ T7489] EXT4-fs: Ignoring removed oldalloc option
[  114.778880][ T7489] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  114.847150][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  114.889764][ T7500] netlink: 'syz.4.1378': attribute type 9 has an invalid length.
[  114.897772][ T7500] __nla_validate_parse: 4 callbacks suppressed
[  114.897788][ T7500] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1378'.
[  114.937239][ T7496] loop0: detected capacity change from 0 to 8192
[  114.945251][ T7496] /dev/loop0: Can't open blockdev
[  115.019435][ T7506] syzkaller1: entered promiscuous mode
[  115.025133][ T7506] syzkaller1: entered allmulticast mode
[  115.082208][ T7511] loop4: detected capacity change from 0 to 512
[  115.089187][ T7511] journal_path: Non-blockdev passed as './file0'
[  115.095605][ T7511] EXT4-fs: error: could not find journal device path
[  115.229114][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.292909][ T7519] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1384'.
[  115.319614][ T7519] bridge_slave_1: left allmulticast mode
[  115.326151][ T7519] bridge_slave_1: left promiscuous mode
[  115.331858][ T7519] bridge0: port 2(bridge_slave_1) entered disabled state
[  115.342733][ T7523] loop3: detected capacity change from 0 to 128
[  115.350319][ T7519] bridge_slave_0: left allmulticast mode
[  115.356163][ T7519] bridge_slave_0: left promiscuous mode
[  115.362029][ T7519] bridge0: port 1(bridge_slave_0) entered disabled state
[  115.483981][ T7531] loop0: detected capacity change from 0 to 1024
[  115.491028][ T7531] EXT4-fs: Ignoring removed oldalloc option
[  115.543254][ T7531] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  115.572757][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.603610][ T7540] netlink: 'syz.0.1391': attribute type 9 has an invalid length.
[  115.611423][ T7540] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1391'.
[  115.786367][ T7550] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  115.794986][ T7550] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  115.804200][ T7550] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(7)
[  115.810825][ T7550] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  115.812460][ T7554] loop0: detected capacity change from 0 to 1024
[  115.818652][ T7550] vhci_hcd vhci_hcd.0: Device attached
[  115.828286][ T7554] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  115.841612][ T7548] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  115.854532][ T7554] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  115.873661][ T7550] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(13)
[  115.880550][ T7550] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  115.888176][ T7550] vhci_hcd vhci_hcd.0: Device attached
[  115.894814][ T7557] vhci_hcd: connection closed
[  115.895161][ T6433] vhci_hcd: stop threads
[  115.904377][ T6433] vhci_hcd: release socket
[  115.908805][ T6433] vhci_hcd: disconnect device
[  115.914689][ T7551] vhci_hcd: connection closed
[  115.914925][ T6433] vhci_hcd: stop threads
[  115.924234][ T6433] vhci_hcd: release socket
[  115.928787][ T6433] vhci_hcd: disconnect device
[  115.936854][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.976324][ T7560] loop0: detected capacity change from 0 to 4096
[  115.994926][ T7563] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2049 sclass=netlink_route_socket pid=7563 comm=syz.4.1398
[  116.008740][ T7560] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  116.122402][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  116.180998][ T7571] loop0: detected capacity change from 0 to 128
[  116.187729][ T7565] wireguard0: entered promiscuous mode
[  116.193267][ T7565] wireguard0: entered allmulticast mode
[  116.358266][ T7584] hub 9-0:1.0: USB hub found
[  116.369911][ T7584] hub 9-0:1.0: 8 ports detected
[  116.414841][ T7588] loop0: detected capacity change from 0 to 512
[  116.634458][ T7604] loop4: detected capacity change from 0 to 128
[  116.668522][ T7610] loop2: detected capacity change from 0 to 512
[  116.693070][ T7610] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  116.786323][ T7610] EXT4-fs (loop2): 1 truncate cleaned up
[  116.786665][ T7610] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  116.839758][ T7624] FAULT_INJECTION: forcing a failure.
[  116.839758][ T7624] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  116.839792][ T7624] CPU: 1 UID: 0 PID: 7624 Comm: syz.2.1415 Not tainted 6.13.0-rc3-syzkaller-00193-ge9b8ffafd20a #0
[  116.839824][ T7624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  116.839839][ T7624] Call Trace:
[  116.839847][ T7624]  <TASK>
[  116.839855][ T7624]  dump_stack_lvl+0xf2/0x150
[  116.839944][ T7624]  dump_stack+0x15/0x1a
[  116.839981][ T7624]  should_fail_ex+0x223/0x230
[  116.840007][ T7624]  should_fail+0xb/0x10
[  116.840055][ T7624]  should_fail_usercopy+0x1a/0x20
[  116.840092][ T7624]  _copy_from_user+0x1e/0xb0
[  116.840128][ T7624]  load_msg+0x17a/0x2c0
[  116.840158][ T7624]  do_mq_timedsend+0x23b/0x680
[  116.840249][ T7624]  __x64_sys_mq_timedsend+0xca/0x150
[  116.840345][ T7624]  x64_sys_call+0x2a68/0x2dc0
[  116.840371][ T7624]  do_syscall_64+0xc9/0x1c0
[  116.840396][ T7624]  ? clear_bhb_loop+0x55/0xb0
[  116.840489][ T7624]  ? clear_bhb_loop+0x55/0xb0
[  116.840514][ T7624]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.840633][ T7624] RIP: 0033:0x7f8d6d365d29
[  116.840649][ T7624] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  116.840668][ T7624] RSP: 002b:00007f8d6b9b6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f2
[  116.840690][ T7624] RAX: ffffffffffffffda RBX: 00007f8d6d556080 RCX: 00007f8d6d365d29
[  116.840706][ T7624] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008
[  116.840750][ T7624] RBP: 00007f8d6b9b6090 R08: 0000000000000000 R09: 0000000000000000
[  116.840764][ T7624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  116.840779][ T7624] R13: 0000000000000000 R14: 00007f8d6d556080 R15: 00007ffe0c0565b8
[  116.840798][ T7624]  </TASK>
[  116.878189][ T7626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  116.878282][ T7626] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  116.879556][ T7626] syz.4.1420[7626] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  116.879749][ T7626] syz.4.1420[7626] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  116.879816][ T7626] syz.4.1420[7626] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  116.931282][ T7622] wireguard0: entered promiscuous mode
[  116.931305][ T7622] wireguard0: entered allmulticast mode
[  117.493334][ T7659] loop3: detected capacity change from 0 to 128
[  117.530852][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.678417][ T7670] loop3: detected capacity change from 0 to 4096
[  117.696872][ T7670] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  117.839420][ T7680] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1436'.
[  117.874744][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.887067][ T7682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  117.895819][ T7682] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  117.904503][ T7682] syz.1.1437[7682] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  117.954369][ T7690] loop3: detected capacity change from 0 to 1024
[  117.972605][ T7690] EXT4-fs: Ignoring removed nobh option
[  117.978314][ T7690] EXT4-fs: Ignoring removed oldalloc option
[  117.985659][ T7690] EXT4-fs: Mount option(s) incompatible with ext3
[  118.182127][ T7697] loop0: detected capacity change from 0 to 128
[  118.321506][ T7705] loop4: detected capacity change from 0 to 256
[  118.656683][ T7719] loop0: detected capacity change from 0 to 512
[  118.695470][ T7719] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  118.733369][ T7719] EXT4-fs (loop0): orphan cleanup on readonly fs
[  118.753434][ T7719] __quota_error: 268 callbacks suppressed
[  118.753531][ T7719] Quota error (device loop0): v2_read_file_info: Block with free entry 1 out of range (1, 6).
[  118.771018][ T7719] EXT4-fs warning (device loop0): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  118.841537][ T7719] EXT4-fs (loop0): Cannot turn on quotas: error -117
[  118.879533][ T7719] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1448: bg 0: block 40: padding at end of block bitmap is not set
[  118.915982][ T7728] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1452'.
[  118.927441][ T7719] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem
[  118.952722][ T7719] EXT4-fs (loop0): 1 truncate cleaned up
[  118.969593][ T7719] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  118.997416][ T7719] geneve2: entered promiscuous mode
[  119.002802][ T7719] geneve2: entered allmulticast mode
[  119.323151][ T7756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  119.339134][ T7756] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  119.348056][ T7756] bpf_get_probe_write_proto: 5 callbacks suppressed
[  119.348085][ T7756] syz.4.1458[7756] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  119.355252][ T7756] syz.4.1458[7756] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  119.366820][ T7756] syz.4.1458[7756] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  119.400046][ T7758] xt_TCPMSS: Only works on TCP SYN packets
[  119.437187][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  119.465179][   T29] audit: type=1326 audit(1734771253.940:9801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7759 comm="syz.1.1460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f8c8a5d29 code=0x7ffc0000
[  119.493132][ T7760] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  119.508338][   T29] audit: type=1326 audit(1734771253.960:9802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7759 comm="syz.1.1460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f8c8a5d29 code=0x7ffc0000
[  119.532006][   T29] audit: type=1326 audit(1734771253.960:9803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7759 comm="syz.1.1460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f8c8a5d29 code=0x7ffc0000
[  119.556075][   T29] audit: type=1326 audit(1734771253.960:9804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7759 comm="syz.1.1460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f8c8a5d29 code=0x7ffc0000
[  119.579677][   T29] audit: type=1326 audit(1734771253.960:9805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7759 comm="syz.1.1460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f8c8a5d29 code=0x7ffc0000
[  119.603337][   T29] audit: type=1326 audit(1734771253.960:9806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7759 comm="syz.1.1460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7f4f8c8a5d29 code=0x7ffc0000
[  119.626889][   T29] audit: type=1326 audit(1734771253.960:9807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7759 comm="syz.1.1460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f8c8a5d29 code=0x7ffc0000
[  119.650338][   T29] audit: type=1326 audit(1734771253.960:9808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7759 comm="syz.1.1460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f4f8c8a5d29 code=0x7ffc0000
[  119.673883][   T29] audit: type=1326 audit(1734771253.960:9809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7759 comm="syz.1.1460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f8c8a5d29 code=0x7ffc0000
[  119.733518][ T7764] xt_hashlimit: max too large, truncated to 1048576
[  119.762485][ T7766] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  119.800845][ T7770] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  119.862830][ T7778] loop2: detected capacity change from 0 to 512
[  119.870482][ T7778] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  119.892129][ T7778] EXT4-fs (loop2): 1 truncate cleaned up
[  119.898370][ T7778] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  120.007618][ T7781] loop4: detected capacity change from 0 to 2048
[  120.034856][ T7781] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  120.088399][ T7789] loop3: detected capacity change from 0 to 4096
[  120.125378][ T7793] hub 9-0:1.0: USB hub found
[  120.130247][ T7793] hub 9-0:1.0: 8 ports detected
[  120.340151][ T7797] xt_TCPMSS: Only works on TCP SYN packets
[  120.512479][ T7801] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1474'.
[  121.176852][ T7820] hub 9-0:1.0: USB hub found
[  121.182336][ T7820] hub 9-0:1.0: 8 ports detected
[  121.210231][ T7826] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  121.312206][ T7831] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1485'.
[  121.327933][ T7834] loop0: detected capacity change from 0 to 1024
[  121.335030][ T7834] EXT4-fs: Ignoring removed oldalloc option
[  121.407954][ T7843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  121.417016][ T7843] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  121.426042][ T7843] syz.2.1491[7843] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  121.426203][ T7843] syz.2.1491[7843] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  121.437741][ T7843] syz.2.1491[7843] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  121.476770][ T7849] loop0: detected capacity change from 0 to 1024
[  121.495057][ T7849] EXT4-fs: Ignoring removed oldalloc option
[  121.531361][ T7855] hub 9-0:1.0: USB hub found
[  121.539961][ T7855] hub 9-0:1.0: 8 ports detected
[  121.637431][ T7860] $H�: renamed from bond0 (while UP)
[  121.649055][ T7860] $H�: entered promiscuous mode
[  121.654392][ T7860] bond_slave_0: entered promiscuous mode
[  121.660175][ T7860] bond_slave_1: entered promiscuous mode
[  121.794549][ T7866] loop4: detected capacity change from 0 to 1024
[  121.812551][ T7866] EXT4-fs: Ignoring removed oldalloc option
[  121.919049][ T7870] loop4: detected capacity change from 0 to 8192
[  121.947436][ T7872] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1501'.
[  121.975341][ T7870] FAULT_INJECTION: forcing a failure.
[  121.975341][ T7870] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  121.988835][ T7870] CPU: 1 UID: 0 PID: 7870 Comm: syz.4.1500 Not tainted 6.13.0-rc3-syzkaller-00193-ge9b8ffafd20a #0
[  121.999647][ T7870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  122.009928][ T7870] Call Trace:
[  122.013311][ T7870]  <TASK>
[  122.016268][ T7870]  dump_stack_lvl+0xf2/0x150
[  122.020920][ T7870]  dump_stack+0x15/0x1a
[  122.025288][ T7870]  should_fail_ex+0x223/0x230
[  122.030056][ T7870]  should_fail+0xb/0x10
[  122.034243][ T7870]  should_fail_usercopy+0x1a/0x20
[  122.039451][ T7870]  _copy_from_user+0x1e/0xb0
[  122.044087][ T7870]  vmemdup_user+0x12e/0x1b0
[  122.048707][ T7870]  path_setxattrat+0x1c9/0x310
[  122.053547][ T7870]  __x64_sys_fsetxattr+0x6d/0x80
[  122.058567][ T7870]  x64_sys_call+0x29d2/0x2dc0
[  122.063288][ T7870]  do_syscall_64+0xc9/0x1c0
[  122.067878][ T7870]  ? clear_bhb_loop+0x55/0xb0
[  122.072589][ T7870]  ? clear_bhb_loop+0x55/0xb0
[  122.077344][ T7870]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  122.083376][ T7870] RIP: 0033:0x7f350b785d29
[  122.087813][ T7870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  122.107648][ T7870] RSP: 002b:00007f3509df1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be
[  122.116105][ T7870] RAX: ffffffffffffffda RBX: 00007f350b975fa0 RCX: 00007f350b785d29
[  122.124111][ T7870] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000003
[  122.132137][ T7870] RBP: 00007f3509df1090 R08: 0000000000000000 R09: 0000000000000000
[  122.140133][ T7870] R10: 000000000000fe44 R11: 0000000000000246 R12: 0000000000000001
[  122.148159][ T7870] R13: 0000000000000000 R14: 00007f350b975fa0 R15: 00007ffd26950858
[  122.156170][ T7870]  </TASK>
[  122.288196][ T7879] loop2: detected capacity change from 0 to 512
[  122.296416][ T7877] loop4: detected capacity change from 0 to 4096
[  122.747118][ T7888] loop2: detected capacity change from 0 to 128
[  122.809566][ T7894] syzkaller1: entered promiscuous mode
[  122.815316][ T7894] syzkaller1: entered allmulticast mode
[  122.906479][ T7905] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1512'.
[  122.924481][ T7907] syzkaller1: entered promiscuous mode
[  122.930060][ T7907] syzkaller1: entered allmulticast mode
[  122.941552][ T7908] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  122.956653][ T7908] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1511'.
[  123.018697][ T7913] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7913 comm=syz.3.1511
[  123.033444][ T7910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  123.040479][ T7912] syzkaller1: entered promiscuous mode
[  123.042749][ T7910] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  123.047594][ T7912] syzkaller1: entered allmulticast mode
[  123.059134][ T7910] syz.2.1514[7910] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  123.061160][ T7910] syz.2.1514[7910] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  123.072773][ T7910] syz.2.1514[7910] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  123.629629][ T7933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  123.651224][ T7933] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  123.722144][ T7941] FAULT_INJECTION: forcing a failure.
[  123.722144][ T7941] name failslab, interval 1, probability 0, space 0, times 0
[  123.734885][ T7941] CPU: 1 UID: 0 PID: 7941 Comm: syz.2.1526 Not tainted 6.13.0-rc3-syzkaller-00193-ge9b8ffafd20a #0
[  123.745716][ T7941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  123.755794][ T7941] Call Trace:
[  123.759083][ T7941]  <TASK>
[  123.762038][ T7941]  dump_stack_lvl+0xf2/0x150
[  123.766775][ T7941]  dump_stack+0x15/0x1a
[  123.770972][ T7941]  should_fail_ex+0x223/0x230
[  123.775741][ T7941]  should_failslab+0x8f/0xb0
[  123.780391][ T7941]  __kmalloc_noprof+0xab/0x3f0
[  123.785208][ T7941]  ? fib6_info_alloc+0x2c/0x90
[  123.790017][ T7941]  ? __rcu_read_unlock+0x4e/0x70
[  123.795013][ T7941]  fib6_info_alloc+0x2c/0x90
[  123.799639][ T7941]  ip6_route_info_create+0x34c/0xba0
[  123.805099][ T7941]  ? cmp_ex_search+0x56/0x70
[  123.809727][ T7941]  ? bsearch+0x98/0xc0
[  123.813881][ T7941]  ip6_route_add+0x26/0x120
[  123.818424][ T7941]  addrconf_add_dev+0x1c6/0x240
[  123.823318][ T7941]  inet6_addr_add+0x1cc/0x660
[  123.828062][ T7941]  inet6_rtm_newaddr+0x4c7/0x5a0
[  123.833035][ T7941]  ? __pfx_inet6_rtm_newaddr+0x10/0x10
[  123.838608][ T7941]  rtnetlink_rcv_msg+0x6aa/0x710
[  123.843581][ T7941]  ? avc_has_perm_noaudit+0x1cc/0x210
[  123.849085][ T7941]  netlink_rcv_skb+0x12c/0x230
[  123.853946][ T7941]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  123.859628][ T7941]  rtnetlink_rcv+0x1c/0x30
[  123.864164][ T7941]  netlink_unicast+0x599/0x670
[  123.868964][ T7941]  netlink_sendmsg+0x5cc/0x6e0
[  123.873763][ T7941]  ? __pfx_netlink_sendmsg+0x10/0x10
[  123.879112][ T7941]  __sock_sendmsg+0x140/0x180
[  123.883910][ T7941]  ____sys_sendmsg+0x312/0x410
[  123.888712][ T7941]  __sys_sendmsg+0x19d/0x230
[  123.893404][ T7941]  __x64_sys_sendmsg+0x46/0x50
[  123.898198][ T7941]  x64_sys_call+0x2734/0x2dc0
[  123.902905][ T7941]  do_syscall_64+0xc9/0x1c0
[  123.907453][ T7941]  ? clear_bhb_loop+0x55/0xb0
[  123.912186][ T7941]  ? clear_bhb_loop+0x55/0xb0
[  123.916894][ T7941]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  123.922834][ T7941] RIP: 0033:0x7f8d6d365d29
[  123.927390][ T7941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  123.947147][ T7941] RSP: 002b:00007f8d6b9d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  123.955594][ T7941] RAX: ffffffffffffffda RBX: 00007f8d6d555fa0 RCX: 00007f8d6d365d29
[  123.963595][ T7941] RDX: 0000000000000080 RSI: 0000000020000040 RDI: 0000000000000008
[  123.971600][ T7941] RBP: 00007f8d6b9d7090 R08: 0000000000000000 R09: 0000000000000000
[  123.979619][ T7941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  123.987682][ T7941] R13: 0000000000000000 R14: 00007f8d6d555fa0 R15: 00007ffe0c0565b8
[  123.995694][ T7941]  </TASK>
[  124.009777][   T29] kauditd_printk_skb: 115 callbacks suppressed
[  124.009796][   T29] audit: type=1326 audit(1734771258.480:9925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7932 comm="syz.0.1523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f018b285d29 code=0x7ffc0000
[  124.039881][   T29] audit: type=1326 audit(1734771258.480:9926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7932 comm="syz.0.1523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f018b285d29 code=0x7ffc0000
[  124.238398][ T7945] loop2: detected capacity change from 0 to 4096
[  124.409889][ T7962] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  124.438811][ T7963] netlink: 'syz.4.1533': attribute type 2 has an invalid length.
[  124.446642][ T7963] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1533'.
[  124.672544][ T7967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  124.682869][ T7967] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  124.694576][ T7967] syz.4.1535[7967] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  124.694809][ T7967] syz.4.1535[7967] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  124.707896][ T7967] syz.4.1535[7967] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  124.738987][ T7970] loop2: detected capacity change from 0 to 128
[  124.827818][ T7978] loop2: detected capacity change from 0 to 1024
[  124.834654][ T7978] EXT4-fs: Ignoring removed oldalloc option
[  124.865293][ T7982] loop0: detected capacity change from 0 to 1024
[  124.872035][ T7982] EXT4-fs: Ignoring removed oldalloc option
[  125.012123][ T7991] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1542'.
[  125.085264][ T7995] loop0: detected capacity change from 0 to 8192
[  125.101221][ T7995] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  125.114270][   T29] audit: type=1326 audit(1734771259.590:9927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8000 comm="syz.3.1546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6460475d29 code=0x7ffc0000
[  125.137836][   T29] audit: type=1326 audit(1734771259.590:9928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8000 comm="syz.3.1546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6460475d29 code=0x7ffc0000
[  125.161386][   T29] audit: type=1326 audit(1734771259.590:9929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8000 comm="syz.3.1546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6460475d29 code=0x7ffc0000
[  125.162256][ T7995] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  125.185107][   T29] audit: type=1326 audit(1734771259.590:9930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8000 comm="syz.3.1546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6460475d29 code=0x7ffc0000
[  125.185142][   T29] audit: type=1326 audit(1734771259.590:9931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8000 comm="syz.3.1546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6460475d29 code=0x7ffc0000
[  125.193989][ T7995] FAT-fs (loop0): Filesystem has been set read-only
[  125.195976][ T7995] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  125.217462][   T29] audit: type=1326 audit(1734771259.590:9932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8000 comm="syz.3.1546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6460475d29 code=0x7ffc0000
[  125.245078][ T7995] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  125.247681][   T29] audit: type=1326 audit(1734771259.590:9933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8000 comm="syz.3.1546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6460475d29 code=0x7ffc0000
[  125.257770][ T7995] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  125.279859][   T29] audit: type=1326 audit(1734771259.590:9934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8000 comm="syz.3.1546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6460475d29 code=0x7ffc0000
[  125.288681][ T7995] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  125.354348][ T8001] FAULT_INJECTION: forcing a failure.
[  125.354348][ T8001] name failslab, interval 1, probability 0, space 0, times 0
[  125.356379][ T7995] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  125.367045][ T8001] CPU: 0 UID: 0 PID: 8001 Comm: syz.3.1546 Not tainted 6.13.0-rc3-syzkaller-00193-ge9b8ffafd20a #0
[  125.377539][ T7995] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  125.386492][ T8001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  125.386510][ T8001] Call Trace:
[  125.386519][ T8001]  <TASK>
[  125.386560][ T8001]  dump_stack_lvl+0xf2/0x150
[  125.386602][ T8001]  dump_stack+0x15/0x1a
[  125.420648][ T8001]  should_fail_ex+0x223/0x230
[  125.425361][ T8001]  should_failslab+0x8f/0xb0
[  125.430065][ T8001]  kmem_cache_alloc_node_noprof+0x59/0x320
[  125.435939][ T8001]  ? __alloc_skb+0x10b/0x310
[  125.440639][ T8001]  __alloc_skb+0x10b/0x310
[  125.445173][ T8001]  ? audit_log_start+0x34c/0x6b0
[  125.450184][ T8001]  audit_log_start+0x368/0x6b0
[  125.455054][ T8001]  audit_seccomp+0x4b/0x130
[  125.459593][ T8001]  __seccomp_filter+0x6fa/0x1180
[  125.464604][ T8001]  ? fput+0x1c4/0x200
[  125.468643][ T8001]  __secure_computing+0x9f/0x1c0
[  125.473752][ T8001]  syscall_trace_enter+0xd1/0x1f0
[  125.478875][ T8001]  ? fpregs_assert_state_consistent+0x83/0xa0
[  125.484970][ T8001]  do_syscall_64+0xaa/0x1c0
[  125.489535][ T8001]  ? clear_bhb_loop+0x55/0xb0
[  125.494302][ T8001]  ? clear_bhb_loop+0x55/0xb0
[  125.499052][ T8001]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.505006][ T8001] RIP: 0033:0x7f646047473c
[  125.509438][ T8001] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  125.529103][ T8001] RSP: 002b:00007f645eae1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  125.537575][ T8001] RAX: ffffffffffffffda RBX: 00007f6460665fa0 RCX: 00007f646047473c
[  125.545696][ T8001] RDX: 000000000000000f RSI: 00007f645eae10a0 RDI: 0000000000000009
[  125.553685][ T8001] RBP: 00007f645eae1090 R08: 0000000000000000 R09: 0000000000000000
[  125.561773][ T8001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  125.569822][ T8001] R13: 0000000000000000 R14: 00007f6460665fa0 R15: 00007ffccb27e1b8
[  125.577806][ T8001]  </TASK>
[  125.582128][ T7995] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  125.591740][ T7995] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  125.601657][ T7995] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  125.685998][ T8015] rdma_op ffff88811b30c580 conn xmit_rdma 0000000000000000
[  125.763621][ T8015] loop0: detected capacity change from 0 to 1024
[  125.780148][ T8026] netlink: 'syz.1.1553': attribute type 10 has an invalid length.
[  125.865494][ T8015] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities
[  125.883934][ T8029] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1554'.
[  125.905412][ T8026] geneve1: entered promiscuous mode
[  125.924759][ T8026] bond0: (slave geneve1): Enslaving as an active interface with an up link
[  125.934773][ T8029] lo: entered promiscuous mode
[  125.939584][ T8029] lo: entered allmulticast mode
[  125.972714][ T8029] tunl0: entered promiscuous mode
[  125.977967][ T8029] tunl0: entered allmulticast mode
[  125.996979][ T8030] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  126.027172][ T8029] gre0: entered promiscuous mode
[  126.032305][ T8029] gre0: entered allmulticast mode
[  126.144160][ T8029] gretap0: entered promiscuous mode
[  126.149500][ T8029] gretap0: entered allmulticast mode
[  126.194442][ T8029] erspan0: entered promiscuous mode
[  126.199801][ T8029] erspan0: entered allmulticast mode
[  126.254458][ T8029] ip_vti0: entered promiscuous mode
[  126.259760][ T8029] ip_vti0: entered allmulticast mode
[  126.295464][ T8029] ip6_vti0: entered promiscuous mode
[  126.300877][ T8029] ip6_vti0: entered allmulticast mode
[  126.334543][ T8029] sit0: entered promiscuous mode
[  126.339700][ T8029] sit0: entered allmulticast mode
[  126.366694][ T8029] ip6tnl0: entered promiscuous mode
[  126.372152][ T8029] ip6tnl0: entered allmulticast mode
[  126.409388][ T8029] ip6gre0: entered promiscuous mode
[  126.415384][ T8029] ip6gre0: entered allmulticast mode
[  126.448011][ T8029] syz_tun: entered promiscuous mode
[  126.453353][ T8029] syz_tun: entered allmulticast mode
[  126.484372][ T8029] ip6gretap0: entered promiscuous mode
[  126.489968][ T8029] ip6gretap0: entered allmulticast mode
[  126.526012][ T8029] vcan0: entered promiscuous mode
[  126.531202][ T8029] vcan0: entered allmulticast mode
[  126.655128][ T8029] bond0: entered promiscuous mode
[  126.660283][ T8029] bond_slave_0: entered promiscuous mode
[  126.666084][ T8029] bond_slave_1: entered promiscuous mode
[  126.671896][ T8029] bond0: entered allmulticast mode
[  126.677088][ T8029] bond_slave_0: entered allmulticast mode
[  126.683046][ T8029] bond_slave_1: entered allmulticast mode
[  126.748199][ T8029] 8021q: adding VLAN 0 to HW filter on device bond0
[  126.762518][ T8029] team0: entered promiscuous mode
[  126.767677][ T8029] team_slave_0: entered promiscuous mode
[  126.773488][ T8029] team_slave_1: entered promiscuous mode
[  126.779509][ T8029] team0: entered allmulticast mode
[  126.784811][ T8029] team_slave_0: entered allmulticast mode
[  126.790669][ T8029] team_slave_1: entered allmulticast mode
[  126.802729][ T8029] 8021q: adding VLAN 0 to HW filter on device team0
[  126.811066][ T8029] dummy0: entered promiscuous mode
[  126.816263][ T8029] dummy0: entered allmulticast mode
[  126.822093][ T8029] nlmon0: entered promiscuous mode
[  126.827360][ T8029] nlmon0: entered allmulticast mode
[  126.834542][ T8029] caif0: entered promiscuous mode
[  126.839636][ T8029] caif0: entered allmulticast mode
[  126.844897][ T8029] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  126.864490][ T8035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  126.873068][ T8035] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  126.890792][ T8035] syz.4.1557[8035] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  126.890857][ T8035] syz.4.1557[8035] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  126.902389][ T8035] syz.4.1557[8035] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  126.945222][ T8040] loop3: detected capacity change from 0 to 512
[  126.980066][ T8042] loop0: detected capacity change from 0 to 512
[  126.992333][ T8040] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1558: bg 0: block 393: padding at end of block bitmap is not set
[  127.008486][ T8040] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem
[  127.017814][ T8040] EXT4-fs (loop3): 2 truncates cleaned up
[  127.113760][ T8050] loop2: detected capacity change from 0 to 1024
[  127.184354][ T8050] EXT4-fs: Ignoring removed oldalloc option
[  127.336975][ T8078] FAULT_INJECTION: forcing a failure.
[  127.336975][ T8078] name failslab, interval 1, probability 0, space 0, times 0
[  127.349689][ T8078] CPU: 1 UID: 0 PID: 8078 Comm: syz.3.1563 Not tainted 6.13.0-rc3-syzkaller-00193-ge9b8ffafd20a #0
[  127.360405][ T8078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  127.370519][ T8078] Call Trace:
[  127.373808][ T8078]  <TASK>
[  127.376795][ T8078]  dump_stack_lvl+0xf2/0x150
[  127.381470][ T8078]  dump_stack+0x15/0x1a
[  127.385737][ T8078]  should_fail_ex+0x223/0x230
[  127.390612][ T8078]  should_failslab+0x8f/0xb0
[  127.395345][ T8078]  kmem_cache_alloc_node_noprof+0x59/0x320
[  127.401260][ T8078]  ? __alloc_skb+0x10b/0x310
[  127.405898][ T8078]  __alloc_skb+0x10b/0x310
[  127.410367][ T8078]  netlink_alloc_large_skb+0xad/0xe0
[  127.415677][ T8078]  netlink_sendmsg+0x3b4/0x6e0
[  127.420575][ T8078]  ? __pfx_netlink_sendmsg+0x10/0x10
[  127.425894][ T8078]  __sock_sendmsg+0x140/0x180
[  127.430614][ T8078]  ____sys_sendmsg+0x312/0x410
[  127.435408][ T8078]  __sys_sendmsg+0x19d/0x230
[  127.440201][ T8078]  __x64_sys_sendmsg+0x46/0x50
[  127.444984][ T8078]  x64_sys_call+0x2734/0x2dc0
[  127.449738][ T8078]  do_syscall_64+0xc9/0x1c0
[  127.454257][ T8078]  ? clear_bhb_loop+0x55/0xb0
[  127.458983][ T8078]  ? clear_bhb_loop+0x55/0xb0
[  127.463681][ T8078]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  127.469673][ T8078] RIP: 0033:0x7f6460475d29
[  127.474525][ T8078] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  127.494385][ T8078] RSP: 002b:00007f645ea9f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  127.502826][ T8078] RAX: ffffffffffffffda RBX: 00007f6460666160 RCX: 00007f6460475d29
[  127.510839][ T8078] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 000000000000000b
[  127.518823][ T8078] RBP: 00007f645ea9f090 R08: 0000000000000000 R09: 0000000000000000
[  127.526905][ T8078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  127.534889][ T8078] R13: 0000000000000000 R14: 00007f6460666160 R15: 00007ffccb27e1b8
[  127.543011][ T8078]  </TASK>
[  128.074076][ T8093] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  128.543694][ T8097] netlink: 'syz.0.1568': attribute type 27 has an invalid length.
[  128.669806][ T8108] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1571'.
[  128.781027][ T8097] batadv_slave_0: left promiscuous mode
[  128.791720][ T8097] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  128.862101][ T8097] geneve0: left allmulticast mode
[  128.879841][ T8097] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  128.888479][ T8097] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  128.896952][ T8097] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  128.905399][ T8097] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  128.922285][ T8097] geneve2: left promiscuous mode
[  128.927326][ T8097] geneve2: left allmulticast mode
[  129.180374][ T8128] syzkaller1: entered promiscuous mode
[  129.185970][ T8128] syzkaller1: entered allmulticast mode
[  129.221535][   T29] kauditd_printk_skb: 44 callbacks suppressed
[  129.221550][   T29] audit: type=1400 audit(1734771263.690:9977): avc:  denied  { getopt } for  pid=8132 comm="syz.2.1579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  129.247229][   T29] audit: type=1400 audit(1734771263.690:9978): avc:  denied  { ioctl } for  pid=8132 comm="syz.2.1579" path="socket:[19448]" dev="sockfs" ino=19448 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  129.271970][   T29] audit: type=1400 audit(1734771263.690:9979): avc:  denied  { create } for  pid=8132 comm="syz.2.1579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  129.291868][   T29] audit: type=1400 audit(1734771263.690:9980): avc:  denied  { setopt } for  pid=8132 comm="syz.2.1579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  129.312274][   T29] audit: type=1400 audit(1734771263.790:9981): avc:  denied  { connect } for  pid=8132 comm="syz.2.1579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  129.386071][ T8133] loop2: detected capacity change from 0 to 512
[  129.401945][ T8138] loop4: detected capacity change from 0 to 2048
[  129.410174][ T8138] EXT4-fs: Ignoring removed mblk_io_submit option
[  129.418051][ T8133] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  129.461469][ T8133] EXT4-fs (loop2): 1 truncate cleaned up
[  129.477702][   T29] audit: type=1400 audit(1734771263.950:9982): avc:  denied  { mount } for  pid=8149 comm="syz.1.1583" name="/" dev="hugetlbfs" ino=21512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1
[  129.543173][   T29] audit: type=1326 audit(1734771264.010:9983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8142 comm="syz.0.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f018b285d29 code=0x7ffc0000
[  129.566779][   T29] audit: type=1326 audit(1734771264.010:9984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8142 comm="syz.0.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f018b285d29 code=0x7ffc0000
[  129.590252][   T29] audit: type=1326 audit(1734771264.010:9985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8142 comm="syz.0.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f018b285d29 code=0x7ffc0000
[  129.613795][   T29] audit: type=1326 audit(1734771264.010:9986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8142 comm="syz.0.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f018b285d29 code=0x7ffc0000
[  129.796840][ T8162] netlink: 'syz.1.1587': attribute type 7 has an invalid length.
[  129.829015][ T8162] netlink: 'syz.1.1587': attribute type 7 has an invalid length.
[  129.944969][ T8162] netlink: 'syz.1.1587': attribute type 7 has an invalid length.
[  130.321406][ T6433] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:29: bg 0: block 234: padding at end of block bitmap is not set
[  130.336357][ T6433] EXT4-fs (loop4): Remounting filesystem read-only
[  130.386992][ T8181] loop4: detected capacity change from 0 to 512
[  130.539795][ T8187] xt_CT: You must specify a L4 protocol and not use inversions on it
[  130.541601][ T8188] loop3: detected capacity change from 0 to 1024
[  130.556563][ T8187] netlink: 'syz.0.1596': attribute type 4 has an invalid length.
[  130.565190][ T8188] EXT4-fs: Ignoring removed nobh option
[  130.570897][ T8188] EXT4-fs: Ignoring removed oldalloc option
[  130.581919][ T8188] EXT4-fs: Mount option(s) incompatible with ext3
[  130.610225][ T8190] syzkaller1: entered promiscuous mode
[  130.616145][ T8190] syzkaller1: entered allmulticast mode
[  130.736028][ T8197] loop4: detected capacity change from 0 to 2048
[  130.754064][ T8195] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1600'.
[  130.854237][ T8210] loop0: detected capacity change from 0 to 1024
[  130.866061][ T8210] EXT4-fs: Ignoring removed nobh option
[  130.871717][ T8210] EXT4-fs: Ignoring removed oldalloc option
[  130.895859][ T8210] EXT4-fs: Mount option(s) incompatible with ext3
[  130.909916][ T8213] loop4: detected capacity change from 0 to 512
[  130.916734][ T8213] ext4: Bad value for 'max_batch_time'
[  130.926165][ T8213] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1605'.
[  131.598357][ T8228] loop3: detected capacity change from 0 to 512
[  131.664871][ T8231] syzkaller1: entered promiscuous mode
[  131.670429][ T8231] syzkaller1: entered allmulticast mode
[  131.691590][ T8228] EXT4-fs: Invalid want_extra_isize 7
[  132.194473][ T8246] loop3: detected capacity change from 0 to 512
[  132.200954][ T8246] EXT4-fs: Ignoring removed bh option
[  132.267105][ T8246] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  132.401358][ T8248] loop4: detected capacity change from 0 to 512
[  132.410123][ T8246] EXT4-fs mount: 30 callbacks suppressed
[  132.410139][ T8246] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  132.434452][ T8248] EXT4-fs: Ignoring removed oldalloc option
[  132.441233][ T8259] loop2: detected capacity change from 0 to 1024
[  132.457691][ T8248] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  132.469089][ T8259] EXT4-fs: Ignoring removed nobh option
[  132.474711][ T8259] EXT4-fs: Ignoring removed oldalloc option
[  132.483769][ T8246] ext4 filesystem being mounted at /328/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  132.501337][ T8259] EXT4-fs: Mount option(s) incompatible with ext3
[  132.526275][ T8248] EXT4-fs (loop4): 1 truncate cleaned up
[  132.532482][ T8248] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  132.586213][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.858789][ T3306] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt.
[  132.893285][ T8271] syzkaller1: entered promiscuous mode
[  132.898849][ T8271] syzkaller1: entered allmulticast mode
[  132.918100][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.957561][ T8273] loop4: detected capacity change from 0 to 1024
[  132.973734][ T8273] EXT4-fs: Ignoring removed nobh option
[  132.979379][ T8273] EXT4-fs: Ignoring removed oldalloc option
[  132.986943][ T8273] EXT4-fs: Mount option(s) incompatible with ext3
[  133.085049][ T8277] syzkaller1: entered promiscuous mode
[  133.090627][ T8277] syzkaller1: entered allmulticast mode
[  133.210029][ T8282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  133.230096][ T8282] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  133.239097][ T8282] syz.3.1630[8282] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  133.239179][ T8282] syz.3.1630[8282] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  133.251561][ T8282] syz.3.1630[8282] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  133.284934][ T8290] loop0: detected capacity change from 0 to 128
[  133.334316][ T8292] loop2: detected capacity change from 0 to 128
[  133.467914][ T8300] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1634'.
[  133.498996][ T8306] loop0: detected capacity change from 0 to 256
[  133.541747][ T8306] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  133.739409][ T8313] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1638'.
[  133.839127][ T8321] loop4: detected capacity change from 0 to 1024
[  133.862942][ T8321] EXT4-fs: Ignoring removed nobh option
[  133.868584][ T8321] EXT4-fs: Ignoring removed oldalloc option
[  133.875806][ T8324] syzkaller1: entered promiscuous mode
[  133.881381][ T8324] syzkaller1: entered allmulticast mode
[  133.894972][ T8321] EXT4-fs: Mount option(s) incompatible with ext3
[  134.120113][ T8349] loop3: detected capacity change from 0 to 128
[  134.484517][ T8362] loop3: detected capacity change from 0 to 128
[  134.566767][ T8327] cgroup: fork rejected by pids controller in /syz2
[  134.614075][   T29] kauditd_printk_skb: 69 callbacks suppressed
[  134.614093][   T29] audit: type=1400 audit(1734771269.090:10056): avc:  denied  { create } for  pid=8372 comm="syz.0.1647" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  134.634727][ T8373] block device autoloading is deprecated and will be removed.
[  134.672903][   T29] audit: type=1400 audit(1734771269.090:10057): avc:  denied  { write } for  pid=8372 comm="syz.0.1647" name="file0" dev="tmpfs" ino=1722 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  134.695934][   T29] audit: type=1400 audit(1734771269.090:10058): avc:  denied  { open } for  pid=8372 comm="syz.0.1647" path="/315/file0" dev="tmpfs" ino=1722 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  134.757579][   T29] audit: type=1400 audit(1734771269.200:10059): avc:  denied  { setattr } for  pid=8372 comm="syz.0.1647" name="file0" dev="tmpfs" ino=1722 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  134.780406][   T29] audit: type=1400 audit(1734771269.220:10060): avc:  denied  { unlink } for  pid=3307 comm="syz-executor" name="file0" dev="tmpfs" ino=1722 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  134.810304][ T8383] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[  134.857021][ T8385] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1650'.
[  134.924455][ T8387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  134.947783][ T8387] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  134.961793][ T8393] loop0: detected capacity change from 0 to 512
[  134.969461][ T8387] syz.2.1651[8387] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  134.969592][ T8387] syz.2.1651[8387] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  134.985438][ T8393] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  135.007853][ T8387] syz.2.1651[8387] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  135.030734][ T8393] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002]
[  135.050460][ T8393] System zones: 1-12
[  135.055004][ T8393] EXT4-fs (loop0): orphan cleanup on readonly fs
[  135.065809][ T8393] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 361: padding at end of block bitmap is not set
[  135.083582][ T8393] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem
[  135.100271][ T8393] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #11: comm +}[@: attempt to clear invalid blocks 33619980 len 1
[  135.114659][ T8393] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm +}[@: invalid indirect mapped block 1811939328 (level 0)
[  135.129338][ T8393] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm +}[@: invalid indirect mapped block 2 (level 2)
[  135.142974][ T8393] EXT4-fs (loop0): 1 truncate cleaned up
[  135.154158][ T8393] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  135.183408][ T8393] EXT4-fs (loop0): ext4_remount: Checksum for group 0 failed (17031!=33349)
[  135.184167][   T29] audit: type=1400 audit(1734771269.660:10061): avc:  denied  { remount } for  pid=8382 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  135.236791][ T8408] loop3: detected capacity change from 0 to 1024
[  135.248022][ T8408] EXT4-fs: Ignoring removed nobh option
[  135.253716][ T8408] EXT4-fs: Ignoring removed oldalloc option
[  135.261850][ T8408] EXT4-fs: Mount option(s) incompatible with ext3
[  135.466384][ T8413] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  136.346755][ T8417] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  136.378322][ T8419] loop4: detected capacity change from 0 to 512
[  136.456913][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  136.543891][   T29] audit: type=1400 audit(1734771271.010:10062): avc:  denied  { append } for  pid=8431 comm="syz.4.1666" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  136.686794][   T29] audit: type=1400 audit(1734771271.160:10063): avc:  denied  { audit_write } for  pid=8431 comm="syz.4.1666" capability=29  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  136.690353][ T8439] loop4: detected capacity change from 0 to 512
[  136.708145][   T29] audit: type=1107 audit(1734771271.160:10064): pid=8431 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='�'
[  136.727210][ T8441] netlink: 'syz.1.1665': attribute type 10 has an invalid length.
[  136.876288][ T8440] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1669'.
[  136.905091][ T8439] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  136.962757][ T8439] EXT4-fs (loop4): orphan cleanup on readonly fs
[  137.007859][ T8439] Quota error (device loop4): v2_read_file_info: Block with free entry 1 out of range (1, 6).
[  137.081227][ T8439] EXT4-fs warning (device loop4): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  137.217839][ T8439] EXT4-fs (loop4): Cannot turn on quotas: error -117
[  137.336999][ T8439] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1666: bg 0: block 40: padding at end of block bitmap is not set
[  137.400109][ T8452] loop0: detected capacity change from 0 to 1024
[  137.427900][ T8452] EXT4-fs: Ignoring removed oldalloc option
[  137.436215][ T8439] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem
[  137.457030][ T8439] EXT4-fs (loop4): 1 truncate cleaned up
[  137.463298][ T8439] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  137.505166][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  137.537562][ T8452] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  137.628207][ T8466] loop3: detected capacity change from 0 to 128
[  137.636344][ T8458] loop4: detected capacity change from 0 to 2048
[  137.655030][ T8458] EXT4-fs: Ignoring removed mblk_io_submit option
[  137.685135][ T8458] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  137.705167][ T8478] loop1: detected capacity change from 0 to 4096
[  137.719155][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  137.730745][ T8478] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  137.867320][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  138.207554][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  140.541447][ T8494] SELinux:  Context @ is not valid (left unmapped).
[  140.572564][   T29] kauditd_printk_skb: 1 callbacks suppressed
[  140.572581][   T29] audit: type=1400 audit(1734771275.010:10066): avc:  denied  { nlmsg_read } for  pid=8496 comm="syz.4.1685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  140.572613][   T29] audit: type=1400 audit(1734771275.010:10067): avc:  denied  { relabelto } for  pid=8492 comm="syz.2.1682" name="rdma.current" dev="tmpfs" ino=1812 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="@"
[  140.572647][   T29] audit: type=1400 audit(1734771275.010:10068): avc:  denied  { associate } for  pid=8492 comm="syz.2.1682" name="rdma.current" dev="tmpfs" ino=1812 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="@"
[  140.572681][   T29] audit: type=1400 audit(1734771275.020:10069): avc:  denied  { unlink } for  pid=3303 comm="syz-executor" name="rdma.current" dev="tmpfs" ino=1812 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="@"
[  140.600415][   T29] audit: type=1400 audit(1734771275.070:10070): avc:  denied  { getopt } for  pid=8496 comm="syz.4.1685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  140.730207][ T8495] loop1: detected capacity change from 0 to 128
[  140.738029][ T8495] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  140.750367][ T8495] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  144.604848][ T8509] loop0: detected capacity change from 0 to 4096
[  144.615053][ T8514] loop1: detected capacity change from 0 to 4096
[  144.684154][ T8526] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1693'.
[  144.693121][ T8526] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1693'.
[  144.712413][ T8514] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  144.724132][ T8527] bond1: entered promiscuous mode
[  144.730012][ T8527] bond1: entered allmulticast mode
[  144.735066][ T8509] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  144.742996][ T8527] 8021q: adding VLAN 0 to HW filter on device bond1
[  144.775041][ T8527] bond1 (unregistering): Released all slaves
[  144.971695][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  145.014674][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  145.030186][ T8540] loop4: detected capacity change from 0 to 1024
[  145.046238][ T8540] EXT4-fs: Ignoring removed oldalloc option
[  145.065055][ T8540] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  145.127839][ T8557] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1702'.
[  145.140574][ T8557] vlan2: entered allmulticast mode
[  145.145828][ T8557] bridge_slave_0: entered allmulticast mode
[  145.155231][ T8557] bridge_slave_0: left allmulticast mode
[  145.203477][ T8563] xt_hashlimit: max too large, truncated to 1048576
[  145.237258][   T29] audit: type=1400 audit(1734771279.710:10071): avc:  denied  { create } for  pid=8567 comm="syz.1.1707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  145.268975][ T8570] netlink: 'syz.2.1706': attribute type 10 has an invalid length.
[  145.278290][   T29] audit: type=1326 audit(1734771279.750:10072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8567 comm="syz.1.1707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f8c8a5d29 code=0x7ffc0000
[  145.302028][   T29] audit: type=1326 audit(1734771279.750:10073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8567 comm="syz.1.1707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f8c8a5d29 code=0x7ffc0000
[  145.302059][   T29] audit: type=1326 audit(1734771279.750:10074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8567 comm="syz.1.1707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f8c8a5d29 code=0x7ffc0000
[  145.302091][   T29] audit: type=1326 audit(1734771279.750:10075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8567 comm="syz.1.1707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f8c8a5d29 code=0x7ffc0000
[  145.345408][ T8570] geneve1: entered promiscuous mode
[  145.372746][ T8572] loop3: detected capacity change from 0 to 4096
[  145.387983][ T8570] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  145.396951][ T8570] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  145.405981][ T8570] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  145.414792][ T8570] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  145.425499][ T8570] geneve1: entered allmulticast mode
[  145.431797][ T8570] bond0: (slave geneve1): Enslaving as an active interface with an up link
[  145.435658][ T8572] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  145.500224][ T8574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  145.524893][ T8574] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  145.549022][ T8574] syz.0.1719[8574] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  145.549113][ T8574] syz.0.1719[8574] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  145.564610][ T8574] syz.0.1719[8574] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  145.576295][   T29] kauditd_printk_skb: 79 callbacks suppressed
[  145.576313][   T29] audit: type=1326 audit(1734771280.050:10155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8567 comm="syz.1.1707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4f8c89cce7 code=0x7ffc0000
[  145.617941][   T29] audit: type=1326 audit(1734771280.050:10156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8567 comm="syz.1.1707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4f8c841f29 code=0x7ffc0000
[  145.641372][   T29] audit: type=1326 audit(1734771280.050:10157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8567 comm="syz.1.1707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f8c8a5d29 code=0x7ffc0000
[  145.665067][   T29] audit: type=1326 audit(1734771280.050:10158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8567 comm="syz.1.1707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4f8c89cce7 code=0x7ffc0000
[  145.688568][   T29] audit: type=1326 audit(1734771280.050:10159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8567 comm="syz.1.1707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4f8c841f29 code=0x7ffc0000
[  145.712158][   T29] audit: type=1326 audit(1734771280.050:10160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8567 comm="syz.1.1707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f8c8a5d29 code=0x7ffc0000
[  145.736086][   T29] audit: type=1326 audit(1734771280.060:10161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8567 comm="syz.1.1707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4f8c89cce7 code=0x7ffc0000
[  145.759690][   T29] audit: type=1326 audit(1734771280.060:10162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8567 comm="syz.1.1707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4f8c841f29 code=0x7ffc0000
[  145.783334][   T29] audit: type=1326 audit(1734771280.060:10163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8567 comm="syz.1.1707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f8c8a5d29 code=0x7ffc0000
[  145.806937][   T29] audit: type=1326 audit(1734771280.070:10164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8567 comm="syz.1.1707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4f8c89cce7 code=0x7ffc0000
[  145.832775][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  145.845683][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  146.036904][ T8604] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1721'.
[  146.106384][ T8611] loop3: detected capacity change from 0 to 1024
[  146.113179][ T8609] loop2: detected capacity change from 0 to 1024
[  146.123408][ T8611] EXT4-fs: Ignoring removed oldalloc option
[  146.129948][ T8609] EXT4-fs: Ignoring removed oldalloc option
[  146.167326][ T8611] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  146.196429][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  146.207799][ T8609] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  146.298059][ T8622] loop3: detected capacity change from 0 to 1024
[  146.310862][ T8622] EXT4-fs: Ignoring removed oldalloc option
[  146.376084][ T8628] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  146.486105][ T8633] loop0: detected capacity change from 0 to 512
[  146.520210][ T8633] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  146.534177][ T8622] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  146.555206][ T8633] EXT4-fs (loop0): 1 truncate cleaned up
[  146.561760][ T8633] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  146.616104][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  146.752072][ T8640] FAULT_INJECTION: forcing a failure.
[  146.752072][ T8640] name failslab, interval 1, probability 0, space 0, times 0
[  146.764880][ T8640] CPU: 0 UID: 0 PID: 8640 Comm: syz.4.1733 Not tainted 6.13.0-rc3-syzkaller-00193-ge9b8ffafd20a #0
[  146.775613][ T8640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  146.775634][ T8640] Call Trace:
[  146.775643][ T8640]  <TASK>
[  146.775653][ T8640]  dump_stack_lvl+0xf2/0x150
[  146.792688][ T8641] loop0: detected capacity change from 0 to 1024
[  146.796607][ T8640]  dump_stack+0x15/0x1a
[  146.804947][ T8641] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  146.807166][ T8640]  should_fail_ex+0x223/0x230
[  146.807246][ T8640]  should_failslab+0x8f/0xb0
[  146.817030][ T8641] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869)
[  146.821626][ T8640]  __kmalloc_cache_node_noprof+0x56/0x320
[  146.827865][ T8641] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  146.835778][ T8640]  ? __get_vm_area_node+0xfb/0x1c0
[  146.835822][ T8640]  __get_vm_area_node+0xfb/0x1c0
[  146.843748][ T8641] EXT4-fs error (device loop0): ext4_get_journal_inode:5809: inode #5: comm syz.0.1732: unexpected bad inode w/o EXT4_IGET_BAD
[  146.851596][ T8640]  __vmalloc_node_range_noprof+0x280/0xe80
[  146.857051][ T8641] EXT4-fs (loop0): no journal found
[  146.861652][ T8640]  ? bpf_prog_alloc_no_stats+0x49/0x380
[  146.891572][ T8640]  ? mntput+0x49/0x70
[  146.895579][ T8640]  ? path_openat+0x1a5a/0x1fa0
[  146.900364][ T8640]  ? _parse_integer_limit+0x167/0x180
[  146.905855][ T8640]  ? bpf_prog_alloc_no_stats+0x49/0x380
[  146.911495][ T8640]  __vmalloc_noprof+0x5e/0x70
[  146.916315][ T8640]  ? bpf_prog_alloc_no_stats+0x49/0x380
[  146.921884][ T8640]  bpf_prog_alloc_no_stats+0x49/0x380
[  146.927277][ T8640]  ? bpf_prog_alloc+0x28/0x150
[  146.932073][ T8640]  bpf_prog_alloc+0x3a/0x150
[  146.936674][ T8640]  bpf_prog_create_from_user+0x73/0x240
[  146.942280][ T8640]  ? copy_bpf_fprog_from_user+0x237/0x240
[  146.948110][ T8640]  fanout_set_data+0x1d7/0x330
[  146.953059][ T8640]  packet_setsockopt+0x6e7/0xfd0
[  146.958123][ T8640]  ? __pfx_packet_setsockopt+0x10/0x10
[  146.963606][ T8640]  __sys_setsockopt+0x187/0x200
[  146.968470][ T8640]  __x64_sys_setsockopt+0x66/0x80
[  146.973532][ T8640]  x64_sys_call+0x282e/0x2dc0
[  146.978311][ T8640]  do_syscall_64+0xc9/0x1c0
[  146.982943][ T8640]  ? clear_bhb_loop+0x55/0xb0
[  146.987681][ T8640]  ? clear_bhb_loop+0x55/0xb0
[  146.992375][ T8640]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  146.998338][ T8640] RIP: 0033:0x7f350b785d29
[  147.002764][ T8640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  147.022387][ T8640] RSP: 002b:00007f3509df1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  147.030840][ T8640] RAX: ffffffffffffffda RBX: 00007f350b975fa0 RCX: 00007f350b785d29
[  147.038816][ T8640] RDX: 0000000000000016 RSI: 0000000000000107 RDI: 0000000000000006
[  147.046860][ T8640] RBP: 00007f3509df1090 R08: 0000000000000010 R09: 0000000000000000
[  147.054905][ T8640] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000001
[  147.062883][ T8640] R13: 0000000000000000 R14: 00007f350b975fa0 R15: 00007ffd26950858
[  147.071024][ T8640]  </TASK>
[  147.074291][ T8640] syz.4.1733: vmalloc error: size 4096, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0
[  147.090128][ T8640] CPU: 0 UID: 0 PID: 8640 Comm: syz.4.1733 Not tainted 6.13.0-rc3-syzkaller-00193-ge9b8ffafd20a #0
[  147.100908][ T8640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  147.111031][ T8640] Call Trace:
[  147.114337][ T8640]  <TASK>
[  147.117295][ T8640]  dump_stack_lvl+0xf2/0x150
[  147.122009][ T8640]  dump_stack+0x15/0x1a
[  147.126211][ T8640]  warn_alloc+0x145/0x1b0
[  147.130641][ T8640]  __vmalloc_node_range_noprof+0x2a5/0xe80
[  147.136677][ T8640]  ? mntput+0x49/0x70
[  147.140742][ T8640]  ? path_openat+0x1a5a/0x1fa0
[  147.145587][ T8640]  ? _parse_integer_limit+0x167/0x180
[  147.150996][ T8640]  ? bpf_prog_alloc_no_stats+0x49/0x380
[  147.156568][ T8640]  __vmalloc_noprof+0x5e/0x70
[  147.161354][ T8640]  ? bpf_prog_alloc_no_stats+0x49/0x380
[  147.166942][ T8640]  bpf_prog_alloc_no_stats+0x49/0x380
[  147.172493][ T8640]  ? bpf_prog_alloc+0x28/0x150
[  147.177361][ T8640]  bpf_prog_alloc+0x3a/0x150
[  147.182015][ T8640]  bpf_prog_create_from_user+0x73/0x240
[  147.187637][ T8640]  ? copy_bpf_fprog_from_user+0x237/0x240
[  147.193385][ T8640]  fanout_set_data+0x1d7/0x330
[  147.198292][ T8640]  packet_setsockopt+0x6e7/0xfd0
[  147.203340][ T8640]  ? __pfx_packet_setsockopt+0x10/0x10
[  147.208864][ T8640]  __sys_setsockopt+0x187/0x200
[  147.213737][ T8640]  __x64_sys_setsockopt+0x66/0x80
[  147.218777][ T8640]  x64_sys_call+0x282e/0x2dc0
[  147.223473][ T8640]  do_syscall_64+0xc9/0x1c0
[  147.228101][ T8640]  ? clear_bhb_loop+0x55/0xb0
[  147.232899][ T8640]  ? clear_bhb_loop+0x55/0xb0
[  147.237633][ T8640]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  147.243587][ T8640] RIP: 0033:0x7f350b785d29
[  147.248040][ T8640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  147.267719][ T8640] RSP: 002b:00007f3509df1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  147.276320][ T8640] RAX: ffffffffffffffda RBX: 00007f350b975fa0 RCX: 00007f350b785d29
[  147.284407][ T8640] RDX: 0000000000000016 RSI: 0000000000000107 RDI: 0000000000000006
[  147.292393][ T8640] RBP: 00007f3509df1090 R08: 0000000000000010 R09: 0000000000000000
[  147.300436][ T8640] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000001
[  147.308540][ T8640] R13: 0000000000000000 R14: 00007f350b975fa0 R15: 00007ffd26950858
[  147.316581][ T8640]  </TASK>
[  147.319714][ T8640] Mem-Info:
[  147.322828][ T8640] active_anon:17385 inactive_anon:9 isolated_anon:0
[  147.322828][ T8640]  active_file:6764 inactive_file:12462 isolated_file:0
[  147.322828][ T8640]  unevictable:0 dirty:275 writeback:0
[  147.322828][ T8640]  slab_reclaimable:2923 slab_unreclaimable:15551
[  147.322828][ T8640]  mapped:31956 shmem:3421 pagetables:861
[  147.322828][ T8640]  sec_pagetables:0 bounce:0
[  147.322828][ T8640]  kernel_misc_reclaimable:0
[  147.322828][ T8640]  free:1880489 free_pcp:5186 free_cma:0
[  147.368136][ T8640] Node 0 active_anon:69424kB inactive_anon:36kB active_file:27056kB inactive_file:49848kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:127824kB dirty:1100kB writeback:0kB shmem:13684kB writeback_tmp:0kB kernel_stack:3488kB pagetables:3444kB sec_pagetables:0kB all_unreclaimable? no
[  147.397002][ T8640] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  147.424102][ T8640] lowmem_reserve[]: 0 2866 7844 0
[  147.429288][ T8640] Node 0 DMA32 free:2950384kB boost:0kB min:4136kB low:7068kB high:10000kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953916kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:3532kB free_cma:0kB
[  147.458159][ T8640] lowmem_reserve[]: 0 0 4978 0
[  147.463044][ T8640] Node 0 Normal free:4556212kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:69424kB inactive_anon:36kB active_file:27056kB inactive_file:49848kB unevictable:0kB writepending:1100kB present:5242880kB managed:5098208kB mlocked:0kB bounce:0kB free_pcp:17468kB local_pcp:1532kB free_cma:0kB
[  147.493473][ T8640] lowmem_reserve[]: 0 0 0 0
[  147.498033][ T8640] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  147.510784][ T8640] Node 0 DMA32: 4*4kB (M) 4*8kB (M) 4*16kB (M) 6*32kB (M) 3*64kB (M) 2*128kB (M) 2*256kB (M) 2*512kB (M) 3*1024kB (M) 2*2048kB (M) 718*4096kB (M) = 2950384kB
[  147.527053][ T8640] Node 0 Normal: 161*4kB (UME) 70*8kB (UME) 62*16kB (UME) 49*32kB (UME) 86*64kB (UME) 51*128kB (UME) 31*256kB (UME) 15*512kB (U) 19*1024kB (UME) 16*2048kB (UME) 1092*4096kB (UM) = 4556468kB
[  147.546107][ T8640] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB
[  147.555664][ T8640] 23110 total pagecache pages
[  147.556362][ T8644] loop0: detected capacity change from 0 to 4096
[  147.560390][ T8640] 4 pages in swap cache
[  147.560400][ T8640] Free swap  = 124684kB
[  147.560408][ T8640] Total swap = 124996kB
[  147.560416][ T8640] 2097051 pages RAM
[  147.560430][ T8640] 0 pages HighMem/MovableOnly
[  147.560436][ T8640] 80180 pages reserved
[  147.624102][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.640119][ T8644] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  147.687989][ T8649] loop1: detected capacity change from 0 to 1024
[  147.695126][ T8649] EXT4-fs: Ignoring removed oldalloc option
[  147.701759][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.725047][ T8649] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  147.894467][ T8665] netlink: 'syz.2.1739': attribute type 10 has an invalid length.
[  147.902678][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.943924][ T8665] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  147.952910][ T8665] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  147.962026][ T8665] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  147.971231][ T8665] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  148.027154][ T8671] loop4: detected capacity change from 0 to 128
[  148.055300][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  148.116743][ T8677] loop0: detected capacity change from 0 to 1024
[  148.150154][ T8677] EXT4-fs: Ignoring removed nobh option
[  148.155812][ T8677] EXT4-fs: Ignoring removed oldalloc option
[  148.431967][ T8677] EXT4-fs: Mount option(s) incompatible with ext3
[  148.498028][ T8675] loop1: detected capacity change from 0 to 8192
[  148.657453][ T8687] loop2: detected capacity change from 0 to 1024
[  148.664191][ T8687] EXT4-fs: Ignoring removed oldalloc option
[  148.690741][ T8687] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  148.872216][ T8695] loop4: detected capacity change from 0 to 1024
[  148.879141][ T8695] EXT4-fs: Ignoring removed nobh option
[  148.884775][ T8695] EXT4-fs: Ignoring removed oldalloc option
[  148.891727][ T8695] EXT4-fs: Mount option(s) incompatible with ext3
[  149.025659][ T8701] loop0: detected capacity change from 0 to 1024
[  149.057653][ T8701] EXT4-fs: Ignoring removed oldalloc option
[  149.085446][ T8705] loop3: detected capacity change from 0 to 1024
[  149.092482][ T8705] EXT4-fs: Ignoring removed nobh option
[  149.098229][ T8705] EXT4-fs: Ignoring removed oldalloc option
[  149.108875][ T8705] EXT4-fs: Mount option(s) incompatible with ext3
[  149.124241][ T8701] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  149.171010][ T8709] loop1: detected capacity change from 0 to 1024
[  149.179002][ T8709] EXT4-fs: Ignoring removed nobh option
[  149.184731][ T8709] EXT4-fs: Ignoring removed oldalloc option
[  149.200786][ T8709] EXT4-fs: Mount option(s) incompatible with ext3
[  149.277833][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  149.425975][ T8717] netlink: 'syz.0.1756': attribute type 10 has an invalid length.
[  149.442223][ T8717] geneve1: entered promiscuous mode
[  149.461577][ T8717] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  149.469912][ T8717] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  149.478242][ T8717] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  149.486540][ T8717] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  149.509122][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  149.521798][ T8717] bond0: (slave geneve1): Enslaving as an active interface with an up link
[  149.626278][ T8720] loop2: detected capacity change from 0 to 512
[  149.649428][ T8723] loop0: detected capacity change from 0 to 128
[  149.651686][ T8720] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #2: comm syz.2.1757: corrupted xattr block 255: invalid header
[  149.674851][ T8720] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117
[  149.685318][ T8720] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  149.699133][ T8723] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  149.712523][ T8720] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #2: comm syz.2.1757: corrupted xattr block 255: invalid header
[  149.727386][ T8723] ext4 filesystem being mounted at /336/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  149.760062][ T8720] SELinux: (dev loop2, type ext4) getxattr errno 117
[  149.780756][ T8720] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  149.887535][ T8727] loop4: detected capacity change from 0 to 4096
[  149.913982][ T8727] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  150.096822][ T3307] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  150.126601][ T8743] loop2: detected capacity change from 0 to 4096
[  150.139199][ T8746] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1766'.
[  150.153115][ T8746] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1766'.
[  150.195947][ T8743] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  150.259224][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  150.504470][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  150.609606][ T8764] loop2: detected capacity change from 0 to 128
[  150.759072][ T8770] loop2: detected capacity change from 0 to 1024
[  150.767041][ T8770] EXT4-fs: Ignoring removed nobh option
[  150.772641][ T8770] EXT4-fs: Ignoring removed oldalloc option
[  150.787460][ T8770] EXT4-fs: Mount option(s) incompatible with ext3
[  150.929408][   T29] kauditd_printk_skb: 134 callbacks suppressed
[  150.929428][   T29] audit: type=1400 audit(1734771285.400:10299): avc:  denied  { append } for  pid=8771 comm="syz.1.1773" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  150.967312][ T8772] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  151.157998][   T29] audit: type=1400 audit(1734771285.620:10300): avc:  denied  { name_bind } for  pid=8774 comm="syz.0.1774" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[  151.213462][ T8776] loop0: detected capacity change from 0 to 2048
[  151.262579][ T8778] loop4: detected capacity change from 0 to 128
[  151.562226][   T29] audit: type=1326 audit(1734771286.030:10301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8793 comm="syz.4.1780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f350b785d29 code=0x7ffc0000
[  151.586271][   T29] audit: type=1326 audit(1734771286.030:10302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8793 comm="syz.4.1780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f350b785d29 code=0x7ffc0000
[  151.609918][   T29] audit: type=1326 audit(1734771286.030:10303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8793 comm="syz.4.1780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f350b785d29 code=0x7ffc0000
[  151.633401][   T29] audit: type=1326 audit(1734771286.030:10304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8793 comm="syz.4.1780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f350b785d29 code=0x7ffc0000
[  151.657001][   T29] audit: type=1326 audit(1734771286.030:10305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8793 comm="syz.4.1780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f350b785d29 code=0x7ffc0000
[  151.680610][   T29] audit: type=1326 audit(1734771286.040:10306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8793 comm="syz.4.1780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f350b785d29 code=0x7ffc0000
[  151.704426][   T29] audit: type=1326 audit(1734771286.040:10307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8793 comm="syz.4.1780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f350b785d29 code=0x7ffc0000
[  151.727975][   T29] audit: type=1326 audit(1734771286.040:10308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8793 comm="syz.4.1780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f350b785d29 code=0x7ffc0000
[  151.774337][ T8795] loop4: detected capacity change from 0 to 2048
[  151.787016][ T8800] loop2: detected capacity change from 0 to 128
[  151.806367][ T8797] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7)
[  151.812967][ T8797] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  151.820514][ T8797] vhci_hcd vhci_hcd.0: Device attached
[  151.827528][ T8795] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  151.891360][ T8797] infiniband syz2: set active
[  151.896158][ T8797] infiniband syz2: added team0
[  151.917828][ T8797] RDS/IB: syz2: added
[  151.923926][ T8797] smc: adding ib device syz2 with port count 1
[  151.930270][ T8797] smc:    ib device syz2 port 1 has pnetid 
[  151.991207][ T8817] loop2: detected capacity change from 0 to 1024
[  151.999707][ T8817] EXT4-fs: Ignoring removed nobh option
[  152.005472][ T8817] EXT4-fs: Ignoring removed oldalloc option
[  152.011594][ T3358] vhci_hcd: vhci_device speed not set
[  152.018885][ T8817] EXT4-fs: Mount option(s) incompatible with ext3
[  152.073001][ T3358] usb 3-1: new full-speed USB device number 2 using vhci_hcd
[  152.184052][ T8801] vhci_hcd: connection reset by peer
[  152.189723][ T6155] vhci_hcd: stop threads
[  152.194106][ T6155] vhci_hcd: release socket
[  152.198529][ T6155] vhci_hcd: disconnect device
[  152.246870][ T8820] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1786'.
[  152.329031][ T8825] loop3: detected capacity change from 0 to 4096
[  152.340651][ T8825] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  152.422656][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  152.513846][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  152.547497][ T8834] loop4: detected capacity change from 0 to 1024
[  152.554802][ T8834] EXT4-fs: Ignoring removed nobh option
[  152.560393][ T8834] EXT4-fs: Ignoring removed oldalloc option
[  152.568882][ T8834] EXT4-fs: Mount option(s) incompatible with ext3
[  152.809681][ T8847] loop0: detected capacity change from 0 to 128
[  153.180474][ T8861] loop2: detected capacity change from 0 to 256
[  153.220934][ T8861] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  153.433364][ T8863] syzkaller1: entered promiscuous mode
[  153.438915][ T8863] syzkaller1: entered allmulticast mode
[  153.562392][ T8872] loop2: detected capacity change from 0 to 256
[  153.576242][ T8872] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  153.784756][ T8891] loop1: detected capacity change from 0 to 4096
[  153.796697][ T8524] ==================================================================
[  153.804820][ T8524] BUG: KCSAN: data-race in do_mpage_readpage / set_blocksize
[  153.812224][ T8524] 
[  153.814551][ T8524] write to 0xffff8881006374ae of 1 bytes by task 8891 on cpu 0:
[  153.822191][ T8524]  set_blocksize+0x215/0x270
[  153.826807][ T8524]  sb_set_blocksize+0x2c/0xb0
[  153.831585][ T8524]  ext4_fill_super+0xdca/0x3a10
[  153.836464][ T8524]  get_tree_bdev_flags+0x29f/0x310
[  153.841595][ T8524]  get_tree_bdev+0x1f/0x30
[  153.846028][ T8524]  ext4_get_tree+0x1c/0x30
[  153.850469][ T8524]  vfs_get_tree+0x56/0x1e0
[  153.854903][ T8524]  do_new_mount+0x227/0x690
[  153.859423][ T8524]  path_mount+0x49b/0xb30
[  153.863778][ T8524]  __se_sys_mount+0x27c/0x2d0
[  153.868471][ T8524]  __x64_sys_mount+0x67/0x80
[  153.873084][ T8524]  x64_sys_call+0x2c84/0x2dc0
[  153.877768][ T8524]  do_syscall_64+0xc9/0x1c0
[  153.882276][ T8524]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  153.888189][ T8524] 
[  153.890517][ T8524] read to 0xffff8881006374ae of 1 bytes by task 8524 on cpu 1:
[  153.898062][ T8524]  do_mpage_readpage+0x55/0xcb0
[  153.902935][ T8524]  mpage_readahead+0x1ad/0x2d0
[  153.907730][ T8524]  blkdev_readahead+0x1c/0x30
[  153.912420][ T8524]  read_pages+0xa0/0x540
[  153.916673][ T8524]  page_cache_ra_unbounded+0x2b8/0x310
[  153.922140][ T8524]  page_cache_sync_ra+0x252/0x670
[  153.927191][ T8524]  filemap_get_pages+0x2c1/0x10e0
[  153.932228][ T8524]  filemap_read+0x221/0x6a0
[  153.936741][ T8524]  blkdev_read_iter+0x20e/0x2c0
[  153.941668][ T8524]  vfs_read+0x5dc/0x700
[  153.945837][ T8524]  ksys_read+0xe8/0x1b0
[  153.950007][ T8524]  __x64_sys_read+0x42/0x50
[  153.954523][ T8524]  x64_sys_call+0x2874/0x2dc0
[  153.959226][ T8524]  do_syscall_64+0xc9/0x1c0
[  153.963756][ T8524]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  153.969694][ T8524] 
[  153.972027][ T8524] value changed: 0x0a -> 0x0c
[  153.976703][ T8524] 
[  153.979045][ T8524] Reported by Kernel Concurrency Sanitizer on:
[  153.985198][ T8524] CPU: 1 UID: 0 PID: 8524 Comm: udevd Not tainted 6.13.0-rc3-syzkaller-00193-ge9b8ffafd20a #0
[  153.995449][ T8524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  154.005518][ T8524] ==================================================================
[  154.026853][ T8891] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  154.065374][ T8896] loop0: detected capacity change from 0 to 2048
[  154.073537][ T8896] EXT4-fs: Ignoring removed mblk_io_submit option
[  154.095279][ T8896] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  154.140514][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  154.294054][ T6433] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm kworker/u8:29: bg 0: block 234: padding at end of block bitmap is not set
[  154.308860][ T6433] EXT4-fs (loop0): Remounting filesystem read-only
[  154.386068][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  157.102940][ T3358] usb 3-1: enqueue for inactive port 0
[  157.108500][ T3358] usb 3-1: enqueue for inactive port 0
[  157.183256][ T3358] vhci_hcd: vhci_device speed not set