last executing test programs: 2.834924503s ago: executing program 4 (id=2116): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x3}, 0x18) lsetxattr$security_capability(&(0x7f0000000080)='./cgroup/cgroup.procs\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a98000000060a0b040000000000000000020000006c000480680001800a000100696e6e65720000005800028008000240000000840800034000000007080004400000000f0800014000000000340005800c0001407061796c6f6164002400028008000340000000b908000240000000040800010700000014080004400000004b0900010073797a30000000000900020073797a32"], 0xc0}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='mm_page_alloc\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x7, 0x4, 0x700, 0x6fc, 0x2c, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 2.740091674s ago: executing program 4 (id=2119): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000090085000000820000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r1, 0x0, 0x3}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000000), 0x1, 0x4d1, &(0x7f0000002600)="$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") r2 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000004c0)=""/205, 0xcd}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) unshare(0x60000480) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) chmod(&(0x7f0000000340)='./file1\x00', 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000ffffe0000001e0000002000000000000000000000000fffd0000000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB], 0xfc}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa86dd6000000000107afffe800000000000000000000000000000ff020000000000000000000000000001"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101900, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCSMAXCID(r5, 0x40047451, &(0x7f0000000100)=0xffff0000) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 2.429551959s ago: executing program 0 (id=2127): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x9135}, 0x18) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ed50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r2, 0x0, 0x4}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="30000000180001f0ffffff00000200000a140000fd0100000000000014000500ff"], 0x30}}, 0x0) 2.372797881s ago: executing program 4 (id=2131): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x2, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000240), &(0x7f0000000340)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.338592031s ago: executing program 0 (id=2134): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x2, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000240), 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000000c0)='mm_page_alloc\x00', r1}, 0x18) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.922547458s ago: executing program 0 (id=2145): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r1, 0x0, 0x3}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000000), 0x1, 0x4d1, &(0x7f0000002600)="$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") r2 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000004c0)=""/205, 0xcd}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) unshare(0x60000480) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) chmod(&(0x7f0000000340)='./file1\x00', 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000ffffe0000001e0000002000000000000000000000000fffd0000000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB], 0xfc}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa86dd6000000000107afffe800000000000000000000000000000ff020000000000000000000000000001"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101900, 0x0) ioctl$PPPIOCSMAXCID(r5, 0x40047451, &(0x7f0000000100)=0xffff0000) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 1.915879608s ago: executing program 4 (id=2146): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030097850000007b00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r2}, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={0x30, r1, 0x1, 0x70bd26, 0x3, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0xfffffffffffffeb6, 0x2, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_icmp(0x2, 0x2, 0x1) syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x3800744, &(0x7f0000000280)={[{@nomblk_io_submit}, {@mb_optimize_scan}, {@usrquota}, {@jqfmt_vfsv1}, {@delalloc}, {@delalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@i_version}]}, 0x1, 0x453, &(0x7f0000002a80)="$eJzs289vFFUcAPDvzG4BAdmK+AMEraKx8UdLCyoHPWg08aCJiR7wWNtCkIUaWhMhRKsxeDQk3o1HE/8CT56MejLxqndDQpSYgF5cM7sztLvdLf2xZSv7+SQL7+28nfe+mfdm377XCaBvDWX/JBE7I+LXiKg0ss0Fhhr/Xb96YfLvqxcmk6jV3vwjqZe7dvXCZFG0+NyOPDOcRqSfJnklzWbPnT81Ua1On83zo3On3xudPXf+6ZOnJ05Mn5g+M3706JHDY889O/5MV+LM2nRt34cz+/e++val1yePXXrnx2+y9t57oHF8cRzdMpQF/metrvXYY92urMf+rS3EmZR73RpWqhQR2eUaqI//SpRi4eJV4pVPeto4YENl9+ytnQ/P14DbWBK9bgHQG8UXffb7t3jdoqnHpnDlxcYPoCzu6/mrcaQcaV5mYAPrH4qIY/P/fJm9omUdotZm3QAAYL2+y+Y/Ty2d/9X3RhpFXtiRl61ExGBE3BURuyPi7ojYExH35GXvi4j7V1l/69bQ0vlnenmtsa1ENv97Pt/bap7/FbO/GCzluTvr8Q8kx09Wpw9FxK6IGI6BrVl+rN3Ji1O8/MvnnepfPP/LXln9xVwwP8nlcssC3dTE3ES3JqVXPo7YV24Xf3JjJyDrC3sjYt/qTr2rSJx84uv9nQrdPP5ldGGfqfZVxOON6z8fLfEXkuX3J0e3RXX60GjRK5b66eeLb3Sqf13xd0F2/bc39/+WEpW/ksX7tbOrr+Pib591/E1ZXmP/35K8Vd+z3pK/98HE3NzZsYgtyWv1fNP74wufLfJF+Sz+4YPtx//u/DNZ/A9ERNaJD0TEgxHxUH7tHo6IRyLi4DLx//DSo+92OrYZrv9U2/vfjf4/2Hz9V58onfr+2071r+z+d6SeGs7fqd//bqJzc7blJdbamwEAAOD/J42InZGkIzfSaToy0vh7+T2xPa3OzM49eXzm/TNTjWcEBmMgLVa6KovWQ8eS+fyMjfx4vlZcHD+crxt/Ubqjnh+ZnKlO9Th26Hc7Ooz/zO+lXrcO2HCe14L+1Tr+0x61A7j1fP9D/zL+oX8Z/9C/2o3/j1ry9gLg9uT7H/qX8Q/9y/iH/mX8Q19az3P9G5UoL/P0vsRmSUS6KZoh0SZR7sLo7vGNCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoEv+CwAA//9uCfIx") r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x10}, 0x100000, 0x7, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r5, 0x2403, 0x2) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0xc0185879, &(0x7f0000000080)={@desc={0x4100, 0x0, @desc1}}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x18}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r7}, 0x10) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000440)=@base={0x18, 0x4, 0x4, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_RCVMTU(r8, 0x112, 0xd, 0x0, &(0x7f0000000040)) getsockopt$bt_BT_VOICE(r8, 0x112, 0xb, 0x0, &(0x7f0000000100)) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYRES32=r3, @ANYRESHEX=0x0, @ANYRESHEX], 0xfc}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r6, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r7}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x27, &(0x7f00000006c0)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @tail_call, @call={0x85, 0x0, 0x0, 0x6a}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x71ee081e}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x6}}], &(0x7f0000000400)='syzkaller\x00', 0x77f0dbbd, 0xac, &(0x7f0000000580)=""/172, 0x0, 0x22, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0xc, 0xfffffffb, 0x90}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000640)=[0x1], &(0x7f0000000800)=[{0x5, 0x3}, {0x5, 0x3, 0xe, 0x5}], 0x10, 0x1, @void, @value}, 0x94) 1.427967526s ago: executing program 4 (id=2147): socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400cc3b", @ANYRES16=0x0, @ANYBLOB="100826bd7000fbdbdf250c000000"], 0x14}, 0x1, 0x0, 0x0, 0x4008054}, 0xc014) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r2}, 0x18) write$selinux_load(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e7578de"], 0x2000) syz_clone(0x25888200, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='mm_page_free\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000380)='xen_mmu_set_pud\x00', r3, 0x0, 0xffffffffffffffff}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c40)={0x6, 0xf, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000003c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100, @void, @value}, 0x94) getsockname$packet(r0, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0xae) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) timer_create(0xb, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffd, 0x1, 0x7, 0x0, 0x2000000003, 0x0, 0x6, 0x0, 0x81, 0x4}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000040000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x48940, 0x0) acct(0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000e0a20500000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) 1.388772856s ago: executing program 0 (id=2148): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0x0, 0x1000, 0x4, 0xfff, 0x8, "4d332e61f7d83c182febbfe3be6b22e62ebce0", 0x1, 0x1004570}) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002080)={0xc, {"a2e3ad21ed0d52f91b5d370987f70e06d038e7ff7fc6e5539b3247298b089b070d356e090890e0879b0e1ac6e7049b334a959bfc9a240d2567f3988f7ef319520100ffe8d178708c523c921b1b9b31070d075d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb056d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498be0800000000000000f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6efcffac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ec126c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b8247068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c198045651cf4778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7beddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c5409711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e24919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf3f2aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f00000000000000000000b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d53588a0f9455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d664130bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7899484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ea4cd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f031755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb24ee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1600000000000000040000000500"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c8, 0x2e0, 0x9403, 0x3002, 0x0, 0x2c0, 0x3f8, 0x3d8, 0x3d8, 0x3f8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x80, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x528) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = syz_open_dev$sg(&(0x7f00000009c0), 0x0, 0x2c40) ioctl$SG_GET_COMMAND_Q(r6, 0x2270, &(0x7f0000000a00)) r7 = syz_open_procfs(0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000000)) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r7, 0x0) mount$9p_rdma(&(0x7f0000000180), &(0x7f0000001a40)='./file0\x00', &(0x7f0000000740), 0x240000, &(0x7f00000008c0)=ANY=[@ANYRESOCT=r0]) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) kexec_load(0x0, 0x0, 0x0, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000ec0)=@newqdisc={0x50, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{0x3, 0x3, 0x1, 0x3, 0x400, 0x8}, [@TCA_NETEM_DELAY_DIST={0x4}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) sendmmsg$inet6(r1, &(0x7f00000055c0)=[{{&(0x7f0000001600)={0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x1}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001d00), 0x0, 0x0, 0xe8}}, {{0x0, 0x0, &(0x7f00000054c0)=[{0x0}, {&(0x7f0000001f00)="f95cae8be050d7d5418da6f3b8088bcafae5490e67b481ae", 0x18}, {&(0x7f00000040c0)="f27319aefc4b81516d3b4858d6974e8de78b08aa2b4d972e609ff949ccd3cf319423cb49024b2667615ba46b45b5648b5ba9566ba005d902ce5560399bdd9edc04968fb37a9e26b6f5e1e4cab93b1757acb5a5a951c201029b432cefe91fcbe7b7597f487707155b9d57626044151e6e7b111bee9e233ea1bee667d30b3182bbaca9231a24762b63bc7c280af6faccb21874f57ed67ad6f2345c91f0dd8687246a8378e76e67246dea3cf319425b917ba0d520a04e28ef2e97e651f57097c0101ee7a2520d9cc479fc3e69602f8c2f47e3b19cce4c8912d9baf2b098635b8b6b76e6f0d74b8cbe73d07dfaf490299d2d234eca44268aa7f2ff76832f5206afeb0852c50d7ddc184a9451778a4176245ee70783c99992f245b595036139583f160d0ea82a9ac498d35a6373859822309ba83a94e274f2ca4c7585d2ef06a04f443d7a54ef1b6167a1df7f9d55374533576b6e6f8f84cd680ae3780537a69edefa1ad30b6077618f7ace37782e57308e9b26673ddb5a834174d997be3c1cac5dd2ec40c8633a2a50508165266045d99aab04b663a237440c9dd7dfed62a9e39b785f5dd3d972c6e5cfc271e9357e9c9a8e91430a76c477c29e0aa0df5d1550daf52977ef8110fac57022474f4b4e827a88cbd869e7d044edd19bc64526028d44200b8994f920129bec387f001522d194ab84a35a57172ad9e4fdc884cff21be4b8e1133b2e609b4277e6898acc33e516520c088abb639b8fe2f8c4c0a1769ce39776ce5792b9276cda17db4e3b476e2b0e77fbba0350e275c8103a3f85afd7364d9405e81fc2c5ca9f8d022bc5a80f2b193e22c36256cfe216151684bbae0b8125ca841c6bdb051ed6452bd0dbcff52bc586237e37ad0f8fef19c8804502266123bff1b1402680eaa3d07d0203f18138b87c43ab6869132c1ea6e19ec23ee3b59e429369de415efa027fbba9a79dc13a472e0406259c74c98113ef61d3544a8451e8108c817edad25ff56d01237233bf550744658ea54f9c8456891a5b7dd03e2732eef38d5dfca8aa4ec3d13c20ce405d9400076a73f604d049ca6fde9ba9f5ff2efd8ac9bf3b98c420f1e1c72b8496848d01b48a564fcada5e377ffb63f4f53539af5b985827158b216224f02ea5e4c648129ca31bcc0026cdc874b296d2daa2f467d2068f0f5646460a2ed0af4d05599b5f490faa69b7ca1611327ecc57fa346b0430413e6e1977678da1c532d269692d4e4db6fdce4bd36b498d0a330e0b38d42e4d18fb46e2ea538d4d196732c10a5d53d32632f0cd6028a26d09a440c57533d032c6c9d0b50b9d4337d508723a200cb123eeaba968dd7a85f350457cbc541b3a657e872bee98b88b1eb803e2e5aab925ece705c04facf7b3a91dd0d006ac95cfa79fb8f5a01de97cea6034177c42dd96912bd16a997f893b267b1fbb47a0bb68da7a3158c6c74133ffee7b3538874338744e4181d9a265ff4ef717067ac0fb7c83c5841cbfed21ae83ce7dde7dc00da2962cdd46f9b0526789267e73c6f050dd0bbcb5b7b938a6cddd96832b7e5e454fbfea3069f3540ecada21eb9305e66dd68daaabede09e53a0dd6663e3aa073df6c094ddce51123b282f17621569e03784e107dd69a963aeb984d4795f1d83338f329efb710ff3249312fdf09d7f560f457396ebfc905a6354681518d0590498f7338895ace6cb2222ffe5e1899705a5291dfef4c980ad094a60c245704242789971128e161b086039d120df6505a49c6a661368f0631f29f9b69a9e088882ef403811b3e41346ff883f2844e9b5bfd54775d289cc6c193b33e2c33c5a0375a4c18d76eefad9dab6a3065339ff872098cfbaf22814e1ce0f6623c12ad65c8104610b281420a016773c09009fbb05afaf0130f42885f0477423a3a9f5bfd15bf058487fb3b987020316ac793f792aac5ccf197e25c82e1445ef9105a5821892e72160e4fa75c73fd6d39b405a5918e3b6988e18bcf25a72745f195dbd47dbb2f3d328fcd3dd8f762b236b1ba7530111ea0695c1ad52b755fd5363c14af5f71bb659541dffa3c6a66b95d2356d1304c508c93971f7ae234e58c3e732b84bf3c554f2e01acd409cebf6965594d150a91671c5b26d5971016e95ae533952a07063f87091980335508bc297025bdb647ebc53220701e168f0b08a365d479b7f0ac271f836207cf2a9e69e2e83283ff9af1eb0094014a2dd929265d45c0a361faa414684b7c0b278c0d881b984f4913183f151ac00c31db53e8993619c3d171bfde246402c025ec2047a839a9ec3653c5f8cc3cbd279d87a81c935020428af78006ee5d01e5affff6a931494e7a90c1f42140f6ae7e500ba63e9ed59a1181ed71925864dc46b5eb5a2acd9fe8697d083372c8fff90ddb38d16364409b9ef4626b24661a9f0c52ba0a6c61fd7744f554fdb64f14303ff0be0411a4748fc3518171a41bbc85d164048c05f7687da4a47222b2a4935fabd8476a34ba57b6acff4eed3dda6a363aede68642501a8ac43d6d2f77fa86b067d959490b3e02aad1b2b356817b386ab9cadc83312d38a1b3fd13385afec8ef72ae9fc9fb231fff0c899813b27b7221cce2bbde5f3cc37f43b703cc347acac971fb01697ead2385322fc1ab4723289bdb3a831fb3e11d28ae027cddbd32abb12b6cecbdb3fad665edb1e68b2044e5142c073b254376c3c563e283798993da0c3476ee1ce7afa3855118068a147751a93fc06a0d0da25f75940d42387c927b742edf04ffd17d07da77b57a1de2884d87e43973b8f194cf082f96871d30e167a27168d59b5ecb6b0dd1ad26de2c3865228fe75d22018ede289568f30fbd1da49e119099abb35be8fe5979223d41ffe7232ce9b14ecce6e10971222f500bee33b65100096be61796569f639ceedadd8fd8906205b3afc49b25f1a2e30fb70e0ecf8a24ad1168cd6babcd48ac4f8d9a2cca9c46a86e796488794c1194298adec698f763f2d2c7ba21f7047dce09fbcb83d449b5401a25981d4932f877ad607953a8a9f1c99e285746f1a255f31904ccc60dc8ea978b27a6d308e9dd4cd87620d8e66e49d0644b90cc8468d5dd378de1df56076bf2eba4f337e2ce643035af2f375deb0b14429643bc234715cd206ce0954b9a1aff5c980b16f410cb8b62ea2f3565157bd1804c51c5119327169dfb8de34d42715f8edc9809d5ae93a1481f12e6d3728b8d8bb0d718efba82ea856811f9eb540cfab4695334527b61bc94f641e8f4fe65bb14a30d72800dd38d43c6168d30191b1a65cdd39edb5bf461533dff1dcfd94e66276814445e877324971b6393d0338eb0b308d14b00503f6b6ef420f9c892d3a0dd28c12b35688afed1f3e5150186edfa3522e234e63471ad3604828bfbad92fe5b582842ff0bf64ef928a8d40d6386750acb51090aeeb58e4e17cdbc38bc58a492be47a5ef9281f10f53f852a5d92a283fa11f10103b7c9211a248bb514118c56188c8887a12800f8768c7bb12987e1ac823b37c6a35b3e37a5318a1c0b886c8b3576e70f4a5f756aba7cf43616c50911507101738f416909031d58a17b4209e372e701d5afda51db5bf70bc1693dc889b3e105cacfcfccb6717d38618ba58fccc31712dbc07e58faf2d33c9dd2e721ebcb96215a21684f0ce253db90ea8fea6693128e1707872c28d9b93119db7367077a6364ce9c77a72d1a4b001a570cd2a641ef1df9489826cbd5eeb4426b254127dc419da9c6797eafab037ab76018049d05cb938d449c1507813946b1c5db356ae1ff34e44a1eef5f5f727786e3210a7edc8270cc6439af50be83498488f64c72df746c0e1f136ab7bde2a914a09cbfceff9c306148e09769ddd362d05169122eb09a611cb628a3d7ff0bc606504520c332f7ab51eb038dcf84729266abb4011f05a3a776ad1f2dfdcdc80a5a1ab4cc4ecb5d3a4800ec14e2e82112b9173a71c333a6662dbbf2ddabce4f6dea721b82f2edeea4393b2ba2d3847bd2f2023b9b594d748653e87835869ce6298ef4900026b0e8e73b8c93d22ec4c187afb7ff87d83013afe801429cae1908276941944c2314ebf25f77cb20feaf39eab55b26b8193b753445b06362752ff47d0428c6d68b58b36a9d87ff4dbb1114d67b4812bf607a3fb9484c8ab248e772164446ac3dabeb26451d5b7c67611699b07abece2d3a0bf03375cf5bf09f93ce20d3b1c3041ffff228c296cf008af60f32c182804012fc23ea93a862b3f7b205921caa804ec8b035c951db1b1735618d4b9d3eb795cd784288593c44e86e4b5f361d2c36fd2c037f01a19ecc30223c52f367ecbd38c65fbc5e3dffca0d2f0774d626caa391894fbb2d0756bcea53384a00967154c7052e24b447957a6348040e97dd7b6fc6d0cf3484d0b35ee3f002911c4053fda25197b25b767cf69dd54b1d6303f2c1e2fabf31e85ec2521df8a525c991a70a1dff051ab6c12f4381927be89b765beaf27b304e50f5c3085d54496c9150eb4ab1a2217a0d8b06d60b300eeca4c10a337952720956c1cf79b38b02198bf1b7aeb3b80f50f4e29403aa82ac17b3078791756e2a29ea7b0df626c68d47108bf8f3eae0619c9cef3b157eac8d70c693d9861d46de90b02f30be6a3531f9b757f7dfea2fc7e5191470cb7b77a8d9132ebe49357250e80eec93ec95a7f194e3be1478a8dda16f8e21b40984ed04e5679404ac8b37628f1ea71e9734eb026944278fddd24224b1d8e430fa93ea5fff5051dc9218fafcd976a04a2349e7ba977442917c8ecc7477aa32f0e05bb0b80dec37f51f4b6eaed1fb5b6390d986f65dd67a3e638416a0255fa450a0feec47120f3cac29fd0beea954f1edd217060d4dda9db1f6433ff0b7a2386ef98ffa3a72fa85e1ec70628a09b59a1fd804d0f1959c5cc0910ba96521f157036b27cc932a82cd8504d1c8a402b06cadb50159bc97cd0f2d40abb1e35e6e9bdf6f6c55ba0a4b3951cf7e4393cb3a23ee89d08fc064eb0ea599e7988697d8fdbae20751a7473dfe04358bd6550d027590d72c91115854d2fdeb834163835ede47838b2875116895821898a8cfc93224f0b5937bfd36a7ea1445be885a4d23c60ad18fe7f19485eea8dea58277ed02b4ff4830f577aa9d8f08725f903c8433b3e433919546f0b5a0798fa9924b751949fe20029703ab75d9f42de6aa2b0d0ffa2571c0e0facd84a11ecfedd4d1ce2db6603bf4373648a88090742f2b30a3f0ea6c501a1c15a52b560d78c713747588559651e9918c57b34e82833d0814e57f3191bcae50ee54988e1da38ccadb4e7fb4aa2163cdf25dbc2ad8a203d6e25ac3e0b02f477d41570e28f91fbbdbff335432a33dc4b5c24b5b37830371a0bda15740f9fab9de7c6525f6411eeb59a1dc59a8776d6d096b3338f5acb8ed9a264aef97783b59d9a8c55fdb63725aae6b4eff6cd46e4a186f869d60886cf8f9456bb86d3a6f6120ebc3c98071318c9c180b7c54847506c0e0a8ec7dcd920e6d679101727f7bbfd8ce8bd95bd83ee4af794b71c69f79da832a29afc919216c4a01d996cd52830e077d6a3f79858065483a49b52d925a5cc24a3ef4147ef0121185aab35db0f425533786998512a86e2b05a6433b0db537d4b389e8bdd29b443b8b1ea77835f202a19f788fa86ecef1ecda0f41e3c26b42a5aec5cfd7f2a2b92df03af3d055a90dabdf02996954d5aef180364cb1b2c73555cb1cf5bf1f3d5fac93a26cc22b3237ff28bdd03c24f465fbaa723c7619fecbab7418c1e5884cc8517a93345c149f3a0034ed", 0x1000}, {&(0x7f0000001f40)="7e80919cd6b69c4c7a94157175d48c1b0e243d0cd9e9dedc40c30423bbbfef2f07b08cc47f8fa7f70aff2284d7d26f1958ca1234f10936368bc7ae071ea7f1b25969647a6a06924aab0cd131235dd6475c804833d82ab94a2ba24f9592be31e1b2c93c1434fe8782e5fe0b3d245554bf4309c0955e0fbfff21414d56d02c9df323738aff885eb3a5e1ea9dfed415a2f77239abb03859286e9e4a7dc5682a614c7c2d8fb1a468a6993889064d145183d654791cfaea0a6754834b3c723366eea6df768bfc1df0540b49e143f488832add8300de957120b801cce34afbf6720238e751d3211bf7031315c4", 0xea}, {&(0x7f0000002040)}, {&(0x7f00000050c0)="891417a3a0fa48df7e786c2c5df017d960fd5563ec60b666cb94f8d66d7f9ecdacd7ea2471610c8d1ba1f586507ef343f2a0a86d2e1cc089a1b1e87b87aacd138e05b16cee8d9a81a3a39532e23f1454a9a0f38fae69027fcea485b59690fec049a20aeb963245fe27954311d532f2479edaab0ea8cda238f6e406eacf07a5c6864be022cc12b2943406e221f6434dfa2f0191db1b01fbdd2e65bab828d730eee1dc22b3f722fff9a2492174a774324483b9c62f694872ba29a73f07718d8ed6043b9db365af189dc1b045967a6747e5dfb9f1fc35af7ba148319d18ca8d", 0xde}, {&(0x7f00000052c0)="4a244498b70666a514f64df6db6368cff49f28b37d2cc6e14d1a0dfc3312756e17bf02fe9c66a7043a095243f1849362208233ce9bede03005080cf85f3edf011bccb8b66500ff4501c1cb0cd4815a6e2c667f1c04788d695acf9ace49c1958961ea84b2df30e5be8a79f7cd3e25cee7d6e76acf18d3b12137efafed8446bbf11335114be4ba666577a55cdfa498bde1364d8417f7f94f747a7a34d27e7c8538c5a1d7265d693b27196a78f9f726480368278c0a02bb37bd5e0a278d1ef11dccd2e3f2392775ca37caf2b9925178d10c2dc33571e9e5c1d814c2f6", 0xdb}, {&(0x7f00000053c0)="4ec1164a2b708d358eb505c5d0bc4ca2ae57ec8cb62e972954f2dda04728147548a062e90ff0cc7cda47f81a554dbb88d12003df68566ee9f9ad43eea25c9fa806a1c5d9a6128284d28c6799fa2fc845c40aa31ea124f4dfb4a1343c9a2e5ef2807190863cebf7731dce11e12ac0ef823dd8a464ee2d5eda3244c9ba88fb751cf31498d4a5868d9206636e", 0x8b}, {&(0x7f0000005480)="f8da324a11301b2d4678ca9e446bf402eda170300785839aa5e147f4849eb5735df3e95f4cd5a920c96fac03f3c8", 0x2e}], 0x9, &(0x7f0000005580)=[@hopopts={{0x20, 0x29, 0x36, {0x0, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0xb44}]}}}], 0x20}}], 0x3, 0x8f5736a59aa48897) 1.360556897s ago: executing program 4 (id=2149): lsm_set_self_attr(0x67, &(0x7f0000000000)={0x65, 0x7, 0x20}, 0x20, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r0}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x41, &(0x7f00000004c0)={0x4b5a9da54893e120, 0x3, 0xfffe}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x6, 0x0}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) memfd_create(0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0x0, 0x9}, 0x18) r6 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x0, 0x0) syz_usbip_server_init(0x1) fsmount(0xffffffffffffffff, 0x0, 0x84) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.068377592s ago: executing program 0 (id=2156): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = add_key$keyring(&(0x7f00000001c0), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000004c0)="01000722625a900ede290f00015b097ead85847837353d2dbad05d", 0x1b, r5) keyctl$set_timeout(0xf, r5, 0x2) syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x301) syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0x5325, 0x80, 0x0, 0x100002ce}, &(0x7f0000000140), &(0x7f0000000040)) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r6, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0x94, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x64, 0x2, {{0x6, 0x2, 0x0, 0x2, 0xffffffff}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xdb0efeadddd42d00}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x200, 0x5, 0x4, 0xff, 0x9, 0x8}}, @TCA_NETEM_CORR={0x10, 0x1, {0xfff, 0x7, 0x4}}]}}}]}, 0x94}}, 0x0) sendmsg$inet(r6, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x4e, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10, 0x7, 0x2, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r10, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000000, 0x80010, r2, 0x6f3c9000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4, 0x0, @dev={0xfe, 0x80, '\x00', 0x2c}}]}, &(0x7f0000000180)=0xfffffffffffffdc6) 1.020241563s ago: executing program 2 (id=2157): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x2, @local, 'bridge_slave_0\x00'}}, 0x1e) close(r1) 1.007935463s ago: executing program 2 (id=2158): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') creat(0x0, 0x103) 932.175235ms ago: executing program 2 (id=2160): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/15], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x1397, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 922.837304ms ago: executing program 2 (id=2161): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='mm_page_alloc\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) openat(0xffffffffffffff9c, 0x0, 0x515001, 0x408) r4 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r4, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @empty, 0xfffffffc}, 0x1c) listen(r4, 0x20000005) r5 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4e20, 0x6, @empty}, 0x1c) accept4(r4, 0x0, 0x0, 0x800) unshare(0x66000080) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffed7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r6}, &(0x7f00000001c0), &(0x7f0000000200)=r7}, 0x20) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001200), 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r8}, &(0x7f0000000380), &(0x7f00000003c0)=r9}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x14, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 892.031635ms ago: executing program 1 (id=2163): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r0 = socket(0x1e, 0x80004, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000500)=@req={0x3fc, 0x7, 0x0, 0x1000004}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg(r2, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000600)=""/179, 0x3514}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) 682.844918ms ago: executing program 1 (id=2164): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x2, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000240), &(0x7f0000000340)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) 642.114689ms ago: executing program 2 (id=2165): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x2, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000240), &(0x7f0000000340)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) 472.348112ms ago: executing program 3 (id=2166): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0x0, 0x1000, 0x4, 0xfff, 0x8, "4d332e61f7d83c182febbfe3be6b22e62ebce0", 0x1, 0x1004570}) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1600000000000000040000000500"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c8, 0x2e0, 0x9403, 0x3002, 0x0, 0x2c0, 0x3f8, 0x3d8, 0x3d8, 0x3f8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x80, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x528) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = syz_open_dev$sg(&(0x7f00000009c0), 0x0, 0x2c40) ioctl$SG_GET_COMMAND_Q(r6, 0x2270, &(0x7f0000000a00)) r7 = syz_open_procfs(0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000000)) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r7, 0x0) mount$9p_rdma(&(0x7f0000000180), &(0x7f0000001a40)='./file0\x00', &(0x7f0000000740), 0x240000, &(0x7f00000008c0)=ANY=[@ANYRESOCT=r0]) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) kexec_load(0x0, 0x0, 0x0, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000ec0)=@newqdisc={0x50, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{0x3, 0x3, 0x1, 0x3, 0x400, 0x8}, [@TCA_NETEM_DELAY_DIST={0x4}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) sendmmsg$inet6(r1, &(0x7f00000055c0)=[{{&(0x7f0000001600)={0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x1}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001d00), 0x0, 0x0, 0xe8}}, {{0x0, 0x0, &(0x7f00000054c0)=[{0x0}, {&(0x7f0000001f00)="f95cae8be050d7d5418da6f3b8088bcafae5490e67b481ae", 0x18}, {&(0x7f00000040c0)="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", 0x1000}, {&(0x7f0000001f40)="7e80919cd6b69c4c7a94157175d48c1b0e243d0cd9e9dedc40c30423bbbfef2f07b08cc47f8fa7f70aff2284d7d26f1958ca1234f10936368bc7ae071ea7f1b25969647a6a06924aab0cd131235dd6475c804833d82ab94a2ba24f9592be31e1b2c93c1434fe8782e5fe0b3d245554bf4309c0955e0fbfff21414d56d02c9df323738aff885eb3a5e1ea9dfed415a2f77239abb03859286e9e4a7dc5682a614c7c2d8fb1a468a6993889064d145183d654791cfaea0a6754834b3c723366eea6df768bfc1df0540b49e143f488832add8300de957120b801cce34afbf6720238e751d3211bf7031315c4", 0xea}, {&(0x7f0000002040)}, {&(0x7f00000050c0)="891417a3a0fa48df7e786c2c5df017d960fd5563ec60b666cb94f8d66d7f9ecdacd7ea2471610c8d1ba1f586507ef343f2a0a86d2e1cc089a1b1e87b87aacd138e05b16cee8d9a81a3a39532e23f1454a9a0f38fae69027fcea485b59690fec049a20aeb963245fe27954311d532f2479edaab0ea8cda238f6e406eacf07a5c6864be022cc12b2943406e221f6434dfa2f0191db1b01fbdd2e65bab828d730eee1dc22b3f722fff9a2492174a774324483b9c62f694872ba29a73f07718d8ed6043b9db365af189dc1b045967a6747e5dfb9f1fc35af7ba148319d18ca8d", 0xde}, {&(0x7f00000052c0)="4a244498b70666a514f64df6db6368cff49f28b37d2cc6e14d1a0dfc3312756e17bf02fe9c66a7043a095243f1849362208233ce9bede03005080cf85f3edf011bccb8b66500ff4501c1cb0cd4815a6e2c667f1c04788d695acf9ace49c1958961ea84b2df30e5be8a79f7cd3e25cee7d6e76acf18d3b12137efafed8446bbf11335114be4ba666577a55cdfa498bde1364d8417f7f94f747a7a34d27e7c8538c5a1d7265d693b27196a78f9f726480368278c0a02bb37bd5e0a278d1ef11dccd2e3f2392775ca37caf2b9925178d10c2dc33571e9e5c1d814c2f6", 0xdb}, {&(0x7f00000053c0)="4ec1164a2b708d358eb505c5d0bc4ca2ae57ec8cb62e972954f2dda04728147548a062e90ff0cc7cda47f81a554dbb88d12003df68566ee9f9ad43eea25c9fa806a1c5d9a6128284d28c6799fa2fc845c40aa31ea124f4dfb4a1343c9a2e5ef2807190863cebf7731dce11e12ac0ef823dd8a464ee2d5eda3244c9ba88fb751cf31498d4a5868d9206636e", 0x8b}, {&(0x7f0000005480)="f8da324a11301b2d4678ca9e446bf402eda170300785839aa5e147f4849eb5735df3e95f4cd5a920c96fac03f3c8", 0x2e}], 0x9, &(0x7f0000005580)=[@hopopts={{0x20, 0x29, 0x36, {0x0, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0xb44}]}}}], 0x20}}], 0x3, 0x8f5736a59aa48897) 338.520164ms ago: executing program 3 (id=2167): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000280)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x903, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0xa, 0x84}}}, 0x5c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x20008844) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0x300, 0x0, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {}, {0x2, 0xffff}, {0xfff3, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x1ff}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc4014}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 294.367015ms ago: executing program 3 (id=2168): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="0000000000000000b705000000000000850000000400000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0xffffffff}, 0x1100, 0x5dd8, 0x3a65, 0x9, 0x0, 0x8, 0x8, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r0}, 0xc) 208.084067ms ago: executing program 3 (id=2169): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000040)=0x7, 0x4) dup(r1) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000380), &(0x7f00000003c0)=0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140ffffffff0c0002800800e9407f000001"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 175.481957ms ago: executing program 1 (id=2170): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x49505ab, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) r1 = socket(0x2, 0x5, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000200)="f9", 0x1}], 0x1, 0x0, 0x0, 0x80020}], 0x1, 0x40c0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r3) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) lchown(&(0x7f0000000180)='./file0\x00', r3, r4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70200001400000bb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmmsg$inet_sctp(r1, &(0x7f0000000bc0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000001c0)=[{0x0, 0x2}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c0000000000000000002b0388edb6556900"/51, @ANYRES32=0x0], 0x30}], 0x1, 0x0) 173.077987ms ago: executing program 3 (id=2171): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/16], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x1397, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 152.484448ms ago: executing program 2 (id=2172): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000840)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') unlink(&(0x7f0000000000)='./file0/file0\x00') r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) creat(&(0x7f0000000300)='./file0\x00', 0x103) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x0, 0x0, 0x3ff, 0x2000000000000003}, 0x0, &(0x7f00000002c0)={0x3df, 0x200000000000, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x1}, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newqdisc={0x88, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x58, 0x2, {{0x0, 0x0, 0x0, 0x0, 0xffffdffd}, [@TCA_NETEM_LOSS={0x34, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x9, 0x9, 0x28a, 0xfffffff8, 0x8000}}, @NETEM_LOSS_GI={0x18, 0x1, {0xfff, 0xfff, 0x99b5, 0x7fffffff, 0x6}}]}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x88}}, 0x0) 137.103238ms ago: executing program 1 (id=2173): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'geneve1\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000)="1441c05461f0006fb748ea3d85ad", 0xe, 0x0, &(0x7f00000000c0)={0x11, 0x0, r1, 0x1, 0xec, 0x6, @link_local}, 0x14) 129.926688ms ago: executing program 0 (id=2174): munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "b1348a2fdf4bd032", "be214298687c62bc5b63c359fc146f68", "f48b7e34", "bad7cfa5892235d9"}, 0x28) setsockopt$inet6_tcp_int(r0, 0x11a, 0x4, &(0x7f0000000100), 0x3c) r1 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f0000000340), 0x1, 0x584, &(0x7f0000000680)="$eJzs3T1sG2UfAPD/neO3X3nf9JVAAtShAqQiVXWSfkBhaldEpUodkFggctyoihNHcQJNlCHdK0QHBKhL2WBgBDEwIBZGVhYQM1JFI5CaDmB0/kjTxAlOW8cl/v2ks++55+z/89z5/9h3upMD6FtHs4c04tmIuJhEDK2rG4hm5dHGeqsrS8V7K0vFJGq1S78lkUTE3ZWlYmv9pPl8KCKWI+KZiPguH3E83Ry3urA4OVYul2ab5eG5qZnh6sLiiStTYxOlidL0qVdePXP29JnRk6PrX3avtr6U31lfr/984/3rP7x+68bnXxxZLn44lsS5GGzWre/H49TYJvk4t2H56W4E66Gk1w3goeSaeZ6l0tMxFLlm1rdTG9rVpgFdVtsXUQP6VNJR/ifdbwiwy1q/A7Lj39a0m78/bp9vHIBkcVebU6NmoHFuIvbXj00O/p48cGSSHW8e3s2GsictX4uIkYGBzZ//pPn5e3gjj6OBdNW35xs7avP+T9fGn2gz/gy2zp0+otb4t7pp/LsfP7fF+Hexwxh/vvXLJ1vGvxbxXNv4yVr8pE38NCLe6TD+zTe/PrtVXe3TiGPRPn5Lsv354eHLV8qlkcZj2xjfHDvy2nb9P7hF/MY52/31r5l223+mw/5/9f2Xzy9vE/+lF7bf/+22/4GI+KDD+P+/+9kbW9XdvpbcyX4F7HT/Z8tudRj/5XNHf+pwVQAAAAAAAAAAYAfS+rVsSVpYm0/TQqFxD+9TcTAtV6pzxy9X5qfHG9e8HY582rrSaqhRTrLyaPN63Fb55IbyqVwzYO5AvVwoVsrjPe47AAAAAAAAAAAAAAAAAAAAPCkObbj//49c/f7/jX9XDexVW//lN7DXyX/oXw/mf9KzdgC7z/c/9K2a/If+Jf+hf8l/6F/yH/qX/If+Jf+hf8l/AAAAAAAAAAAAAAAAAAAAAAAAAADoiosXLmRT7d7KUjErjw8szE9W3j0xXqpOFqbmi4ViZXamMFGpTJRLhWJl6p/eL6lUZkZiev7q8FypOjdcXVh8e6oyP936T9FSvus9AgAAAAAAAAAAAAAAAAAAgH+fwfqUpIWISOvzaVooRPw3Ig5HPrl8pVwaiYj/RcSPufy+rDza60YDAAAAAAAAAAAAAAAAAADAHlNdWJwcK5dLs30yM7CTlSNieWPVvniUZmTvuONX5Zv76knZhrs6k3X8CWhG/830dlwCAAAAAAAAAAAAAAAAAIB+dP+m305f8Vd3GwQAAAAAAAAAAAAAAAAAAAB9Kf01iYhsOjb04uDG2v8kq7n6c0S8d/PSR1fH5uZmR7Pld9aWz33cXH6yF+0HOtXK01YeAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPdVFxYnx8rl0mwXZ3rdRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICH8XcAAAD//6fi090=") capset(&(0x7f0000000000)={0x20080522}, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r2, &(0x7f0000000000)={&(0x7f00000002c0)={0xa, 0x4e04, 0x1009, @loopback, 0x4}, 0x1c, 0x0, 0x0, &(0x7f0000002c00)=ANY=[@ANYBLOB="1400000000000000290000003e000000010000000000000068000000000000002900000037"], 0xb0}, 0x8810) munmap(&(0x7f0000006000/0x4000)=nil, 0x4000) r3 = openat(r1, &(0x7f0000000100)='./file1\x00', 0x333742, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2, 0x11, r3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000007000/0x3000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000005000/0x2000)=nil, &(0x7f0000004000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000007000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000140)="7d235746c86bb04a22e9a191d03d172a1d1f0f111d5d885fc989dfa6b910b26b9bc156c77b39a0ed5c3944b4b8e05106364d9cd6ae7ca298282bbc7e11", 0x3d, r3}, 0x68) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x80044940, &(0x7f0000001480)) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) r4 = fcntl$getown(0xffffffffffffffff, 0x9) r5 = syz_open_procfs(r4, &(0x7f0000000000)='net/tcp\x00') preadv(r5, &(0x7f00000102c0)=[{&(0x7f0000000040)=""/144, 0x90}], 0x1, 0xc03, 0x0) 93.149209ms ago: executing program 3 (id=2175): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="08eabc2b27cb0955bad9cd0bc2ce6e511ee08f44"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x86, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r6 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n [ 139.588894][ T8134] dump_stack_lvl+0xf6/0x150 [ 139.588917][ T8134] dump_stack+0x15/0x1a [ 139.588940][ T8134] should_fail_ex+0x261/0x270 [ 139.589018][ T8134] should_fail+0xb/0x10 [ 139.589073][ T8134] should_fail_usercopy+0x1a/0x20 [ 139.589102][ T8134] _copy_to_user+0x20/0xa0 [ 139.589135][ T8134] simple_read_from_buffer+0xb2/0x130 [ 139.589166][ T8134] proc_fail_nth_read+0x103/0x140 [ 139.589325][ T8134] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 139.589359][ T8134] vfs_read+0x1b2/0x710 [ 139.589385][ T8134] ? __rcu_read_unlock+0x4e/0x70 [ 139.589413][ T8134] ? __fget_files+0x186/0x1c0 [ 139.589434][ T8134] ksys_read+0xeb/0x1b0 [ 139.589488][ T8134] __x64_sys_read+0x42/0x50 [ 139.589515][ T8134] x64_sys_call+0x2a3b/0x2e10 [ 139.589538][ T8134] do_syscall_64+0xc9/0x1c0 [ 139.589646][ T8134] ? clear_bhb_loop+0x25/0x80 [ 139.589667][ T8134] ? clear_bhb_loop+0x25/0x80 [ 139.589701][ T8134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.589728][ T8134] RIP: 0033:0x7fd78448bb7c [ 139.589744][ T8134] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 139.589762][ T8134] RSP: 002b:00007fd782af7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 139.589780][ T8134] RAX: ffffffffffffffda RBX: 00007fd7846a5fa0 RCX: 00007fd78448bb7c [ 139.589796][ T8134] RDX: 000000000000000f RSI: 00007fd782af70a0 RDI: 0000000000000003 [ 139.589807][ T8134] RBP: 00007fd782af7090 R08: 0000000000000000 R09: 0000000000000000 [ 139.589837][ T8134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.589849][ T8134] R13: 0000000000000000 R14: 00007fd7846a5fa0 R15: 00007ffdb89857a8 [ 139.589867][ T8134] [ 139.829722][ T8123] geneve2: entered promiscuous mode [ 139.835137][ T8123] geneve2: entered allmulticast mode [ 139.865077][ T8110] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.909335][ T8140] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8140 comm=syz.4.1549 [ 139.922067][ T8140] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8140 comm=syz.4.1549 [ 139.940376][ T8137] xt_CT: You must specify a L4 protocol and not use inversions on it [ 139.942536][ T8138] loop3: detected capacity change from 0 to 512 [ 139.961321][ T8110] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.971659][ T8140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.973621][ T8138] EXT4-fs error (device loop3): ext4_orphan_get:1416: comm syz.3.1548: bad orphan inode 15 [ 139.991643][ T8140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.994013][ T8138] ext4_test_bit(bit=14, block=18) = 1 [ 140.004872][ T8138] is_bad_inode(inode)=0 [ 140.009050][ T8138] NEXT_ORPHAN(inode)=1023 [ 140.013474][ T8138] max_ino=32 [ 140.016688][ T8138] i_nlink=0 [ 140.020334][ T8138] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2962: inode #15: comm syz.3.1548: corrupted xattr block 19: invalid header [ 140.037151][ T8138] EXT4-fs warning (device loop3): ext4_evict_inode:279: xattr delete (err -117) [ 140.046758][ T8138] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 140.075130][ T8138] ext4 filesystem being mounted at /261/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 140.144475][ T8148] netlink: 'syz.3.1552': attribute type 1 has an invalid length. [ 140.161612][ T8148] bond_slave_1: mtu less than device minimum [ 140.198042][ T8151] loop0: detected capacity change from 0 to 2048 [ 140.204926][ T8151] EXT4-fs: Ignoring removed mblk_io_submit option [ 140.296006][ T3539] kernel write not supported for file /664/sched (pid: 3539 comm: kworker/0:6) [ 140.395489][ T8165] loop3: detected capacity change from 0 to 512 [ 140.406527][ T8164] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1557'. [ 140.427510][ T8165] ext4 filesystem being mounted at /265/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.492546][ T8170] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.1558: corrupted xattr block 32: invalid header [ 140.506116][ T8170] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 140.517028][ T8170] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.1558: corrupted xattr block 32: invalid header [ 140.532535][ T8170] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 140.542221][ T8170] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.1558: corrupted xattr block 32: invalid header [ 140.606129][ T8173] loop3: detected capacity change from 0 to 512 [ 140.620903][ T8173] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 140.637716][ T8175] loop4: detected capacity change from 0 to 512 [ 140.664452][ T8175] ext4 filesystem being mounted at /303/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.687144][ T8173] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.1560: Failed to acquire dquot type 0 [ 140.731240][ T8173] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 140.749821][ T8173] EXT4-fs (loop3): 1 truncate cleaned up [ 140.762622][ T8180] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.1559: corrupted xattr block 32: invalid header [ 140.777091][ T8173] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.1560: corrupted xattr block 19: bad e_name length [ 140.794487][ T8173] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 140.825947][ T8180] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 140.838519][ T8173] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.1560: corrupted xattr block 19: bad e_name length [ 140.839609][ T8180] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.1559: corrupted xattr block 32: invalid header [ 140.872217][ T8181] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.1559: corrupted xattr block 32: invalid header [ 140.881062][ T8175] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1559'. [ 140.885702][ T8181] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 140.923898][ T8180] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 140.923939][ T8180] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.1559: corrupted xattr block 32: invalid header [ 140.924049][ T8181] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.1559: corrupted xattr block 32: invalid header [ 140.924204][ T8180] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 140.981714][ T8184] xt_CT: You must specify a L4 protocol and not use inversions on it [ 141.068634][ T8192] netlink: 'syz.4.1565': attribute type 1 has an invalid length. [ 141.089382][ T8192] bond_slave_1: mtu less than device minimum [ 141.119032][ T8194] loop4: detected capacity change from 0 to 256 [ 141.127209][ T8194] vfat: Unknown parameter '' [ 141.224281][ T8198] loop4: detected capacity change from 0 to 2048 [ 141.246537][ T8198] EXT4-fs: Ignoring removed mblk_io_submit option [ 141.257724][ T1037] kernel write not supported for file /837/sched (pid: 1037 comm: kworker/1:2) [ 141.387079][ T8206] loop4: detected capacity change from 0 to 512 [ 141.395774][ T8206] EXT4-fs: Ignoring removed nobh option [ 141.402796][ T8206] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 141.412861][ T8206] EXT4-fs error (device loop4): ext4_orphan_get:1390: inode #13: comm syz.4.1570: casefold flag without casefold feature [ 141.425926][ T8206] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz.4.1570: couldn't read orphan inode 13 (err -117) [ 141.533322][ T8206] EXT4-fs warning (device loop4): ext4_lookup:1801: Inconsistent encryption contexts: 2/12 [ 141.543855][ T8206] EXT4-fs warning (device loop4): ext4_lookup:1801: Inconsistent encryption contexts: 2/12 [ 141.556976][ T8206] EXT4-fs warning (device loop4): ext4_lookup:1801: Inconsistent encryption contexts: 2/12 [ 141.617493][ T8212] vhci_hcd: invalid port number 23 [ 141.683334][ T8216] xt_CT: You must specify a L4 protocol and not use inversions on it [ 141.739088][ T8218] loop4: detected capacity change from 0 to 164 [ 141.747260][ T29] kauditd_printk_skb: 127 callbacks suppressed [ 141.747320][ T29] audit: type=1400 audit(1744332516.243:3549): avc: denied { bind } for pid=8217 comm="syz.4.1575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 141.891612][ T29] audit: type=1400 audit(1744332516.353:3550): avc: denied { setopt } for pid=8217 comm="syz.4.1575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 141.955028][ T8221] netlink: 'syz.1.1576': attribute type 1 has an invalid length. [ 142.289715][ T8219] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.301317][ T8221] bond_slave_1: mtu less than device minimum [ 142.374724][ T8219] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.400414][ T8228] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1577'. [ 142.419921][ T8228] batadv1: entered allmulticast mode [ 142.442092][ T8226] tipc: Started in network mode [ 142.447038][ T8226] tipc: Node identity 06bb6580b9fc, cluster identity 4711 [ 142.454250][ T8226] tipc: Enabled bearer , priority 0 [ 142.462417][ T8227] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1578'. [ 142.474360][ T8219] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.505316][ T8225] tipc: Resetting bearer [ 142.521249][ T8225] tipc: Disabling bearer [ 142.553253][ T8219] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.619746][ T8219] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.634149][ T8219] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.645949][ T8219] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.660964][ T8219] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.692110][ T23] kernel write not supported for file /764/sched (pid: 23 comm: kworker/1:0) [ 142.739436][ T8235] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 142.879547][ T29] audit: type=1326 audit(1744332517.343:3551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8244 comm="syz.4.1585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5aa14d169 code=0x7ffc0000 [ 142.904386][ T29] audit: type=1326 audit(1744332517.343:3552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8244 comm="syz.4.1585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5aa14d169 code=0x7ffc0000 [ 142.927846][ T29] audit: type=1326 audit(1744332517.353:3553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8244 comm="syz.4.1585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe5aa14d169 code=0x7ffc0000 [ 142.951307][ T29] audit: type=1326 audit(1744332517.353:3554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8244 comm="syz.4.1585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5aa14d169 code=0x7ffc0000 [ 142.974807][ T29] audit: type=1326 audit(1744332517.353:3555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8244 comm="syz.4.1585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe5aa14d169 code=0x7ffc0000 [ 142.998372][ T29] audit: type=1326 audit(1744332517.353:3556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8244 comm="syz.4.1585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5aa14d169 code=0x7ffc0000 [ 143.021964][ T29] audit: type=1326 audit(1744332517.353:3557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8244 comm="syz.4.1585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe5aa14d169 code=0x7ffc0000 [ 143.045434][ T29] audit: type=1326 audit(1744332517.353:3558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8244 comm="syz.4.1585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5aa14d169 code=0x7ffc0000 [ 143.072507][ T8248] netlink: 'syz.4.1586': attribute type 10 has an invalid length. [ 143.132515][ T8249] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1586'. [ 143.293648][ T8251] loop4: detected capacity change from 0 to 512 [ 143.302509][ T8251] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 143.320338][ T8251] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.1587: Failed to acquire dquot type 0 [ 143.334010][ T8251] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 143.348798][ T8251] EXT4-fs (loop4): 1 truncate cleaned up [ 143.360607][ T8251] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.1587: corrupted xattr block 19: bad e_name length [ 143.376576][ T8251] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 143.385687][ T8251] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.1587: corrupted xattr block 19: bad e_name length [ 143.428806][ T8255] netlink: 'syz.4.1588': attribute type 1 has an invalid length. [ 143.446306][ T8255] bond_slave_1: mtu less than device minimum [ 143.524209][ T8257] loop4: detected capacity change from 0 to 512 [ 143.530868][ T8257] journal_path: Non-blockdev passed as './bus' [ 143.537109][ T8257] EXT4-fs: error: could not find journal device path [ 143.573228][ T8259] loop4: detected capacity change from 0 to 512 [ 143.581929][ T8259] journal_path: Non-blockdev passed as './bus' [ 143.588296][ T8259] EXT4-fs: error: could not find journal device path [ 143.627262][ T10] kernel write not supported for file /787/sched (pid: 10 comm: kworker/0:1) [ 143.676780][ T8263] loop7: detected capacity change from 0 to 16384 [ 143.709282][ T8263] Invalid logical block size (7) [ 143.766955][ T8267] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 143.888908][ T8273] xt_CT: You must specify a L4 protocol and not use inversions on it [ 143.899257][ T8268] loop7: detected capacity change from 16384 to 16383 [ 144.090635][ T8280] loop3: detected capacity change from 0 to 256 [ 144.091910][ T8282] loop2: detected capacity change from 0 to 512 [ 144.124201][ T8280] vfat: Unknown parameter '' [ 144.140464][ T8282] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 144.162226][ T8287] loop1: detected capacity change from 0 to 512 [ 144.204062][ T8287] ext4 filesystem being mounted at /312/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.230923][ T36] kernel write not supported for file /679/sched (pid: 36 comm: kworker/1:1) [ 144.275812][ T8282] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.1598: Failed to acquire dquot type 0 [ 144.302096][ T8297] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.1601: corrupted xattr block 32: invalid header [ 144.331159][ T8282] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 144.351366][ T8297] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 144.365519][ T8297] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.1601: corrupted xattr block 32: invalid header [ 144.451455][ T8282] EXT4-fs (loop2): 1 truncate cleaned up [ 144.459324][ T8297] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 144.474370][ T8301] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 144.475025][ T8297] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.1601: corrupted xattr block 32: invalid header [ 144.506383][ T8282] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.1598: corrupted xattr block 19: bad e_name length [ 144.529653][ T8282] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 144.539202][ T8282] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.1598: corrupted xattr block 19: bad e_name length [ 144.572168][ T8307] loop1: detected capacity change from 0 to 512 [ 144.607821][ T8307] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 144.673869][ T8307] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.1606: Failed to acquire dquot type 0 [ 144.690242][ T8313] netlink: 'syz.2.1607': attribute type 1 has an invalid length. [ 144.716857][ T8307] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 144.808685][ T8307] EXT4-fs (loop1): 1 truncate cleaned up [ 144.875084][ T8307] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.1606: corrupted xattr block 19: bad e_name length [ 144.911904][ T8307] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 144.927533][ T23] kernel write not supported for file /799/sched (pid: 23 comm: kworker/1:0) [ 144.964988][ T8307] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.1606: corrupted xattr block 19: bad e_name length [ 145.059419][ T8330] loop0: detected capacity change from 0 to 2048 [ 145.066103][ T8330] EXT4-fs: Ignoring removed mblk_io_submit option [ 145.121064][ T8335] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 145.134713][ T8337] siw: device registration error -23 [ 145.148137][ T8330] netlink: 'syz.0.1615': attribute type 29 has an invalid length. [ 145.198604][ T8330] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1615: bg 0: block 234: padding at end of block bitmap is not set [ 145.244274][ T8330] EXT4-fs (loop0): Remounting filesystem read-only [ 145.298235][ T8350] loop0: detected capacity change from 0 to 2048 [ 145.321944][ T8350] EXT4-fs: Ignoring removed mblk_io_submit option [ 145.330095][ T8353] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1621'. [ 145.360156][ T8347] loop1: detected capacity change from 0 to 512 [ 145.395548][ T8350] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1620: bg 0: block 234: padding at end of block bitmap is not set [ 145.423655][ T8350] EXT4-fs (loop0): Remounting filesystem read-only [ 145.441392][ T8347] ext4 filesystem being mounted at /315/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.472244][ T10] kernel write not supported for file /877/sched (pid: 10 comm: kworker/0:1) [ 145.528595][ T8369] loop4: detected capacity change from 0 to 1024 [ 145.584336][ T8369] ext4 filesystem being mounted at /331/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.603966][ T8376] loop2: detected capacity change from 0 to 2048 [ 145.620999][ T8380] loop0: detected capacity change from 0 to 512 [ 145.630603][ T8380] ext4 filesystem being mounted at /346/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.642253][ T8379] loop3: detected capacity change from 0 to 512 [ 145.687105][ T8386] netlink: 'syz.4.1630': attribute type 1 has an invalid length. [ 145.705584][ T8379] ext4 filesystem being mounted at /274/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.729701][ T8390] vhci_hcd: invalid port number 23 [ 145.736324][ T8386] bond_slave_1: mtu less than device minimum [ 145.737109][ T8380] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.1627: corrupted xattr block 32: invalid header [ 145.758849][ T8390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.768214][ T8392] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 145.768319][ T8390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.786034][ T8380] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 145.801172][ T8380] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.1627: corrupted xattr block 32: invalid header [ 145.801204][ T8393] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.1627: corrupted xattr block 32: invalid header [ 145.815613][ T8380] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 145.864349][ T8380] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.1627: corrupted xattr block 32: invalid header [ 145.881539][ T8400] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1627'. [ 145.893097][ T8393] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 145.894986][ T8402] loop4: detected capacity change from 0 to 512 [ 145.922555][ T8393] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.1627: corrupted xattr block 32: invalid header [ 145.936201][ T8403] FAULT_INJECTION: forcing a failure. [ 145.936201][ T8403] name failslab, interval 1, probability 0, space 0, times 0 [ 145.948962][ T8403] CPU: 0 UID: 0 PID: 8403 Comm: syz.3.1633 Not tainted 6.15.0-rc1-syzkaller-00095-g2eb959eeecc6 #0 PREEMPT(voluntary) [ 145.948996][ T8403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 145.949010][ T8403] Call Trace: [ 145.949019][ T8403] [ 145.949028][ T8403] dump_stack_lvl+0xf6/0x150 [ 145.949060][ T8403] dump_stack+0x15/0x1a [ 145.949080][ T8403] should_fail_ex+0x261/0x270 [ 145.949114][ T8403] should_failslab+0x8f/0xb0 [ 145.949151][ T8403] __kmalloc_noprof+0xad/0x410 [ 145.949240][ T8403] ? copy_splice_read+0xb8/0x5d0 [ 145.949279][ T8403] copy_splice_read+0xb8/0x5d0 [ 145.949314][ T8403] ? file_has_perm+0x334/0x380 [ 145.949346][ T8403] sock_splice_read+0xac/0xb0 [ 145.949400][ T8403] ? __pfx_sock_splice_read+0x10/0x10 [ 145.949505][ T8403] splice_file_to_pipe+0x237/0x390 [ 145.949538][ T8403] do_splice+0xcec/0x1160 [ 145.949566][ T8403] ? get_pid_task+0x94/0xd0 [ 145.949595][ T8403] ? proc_fail_nth_write+0x12d/0x160 [ 145.949618][ T8403] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 145.949666][ T8403] ? __rcu_read_unlock+0x4e/0x70 [ 145.949758][ T8403] ? __fget_files+0x186/0x1c0 [ 145.949778][ T8403] ? pipe_clear_nowait+0xd7/0x110 [ 145.949809][ T8403] __se_sys_splice+0x254/0x3b0 [ 145.949848][ T8403] __x64_sys_splice+0x78/0x90 [ 145.949931][ T8403] x64_sys_call+0xf5b/0x2e10 [ 145.949958][ T8403] do_syscall_64+0xc9/0x1c0 [ 145.950058][ T8403] ? clear_bhb_loop+0x25/0x80 [ 145.950079][ T8403] ? clear_bhb_loop+0x25/0x80 [ 145.950100][ T8403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.950124][ T8403] RIP: 0033:0x7fd78448d169 [ 145.950169][ T8403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.950190][ T8403] RSP: 002b:00007fd782ad6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 145.950212][ T8403] RAX: ffffffffffffffda RBX: 00007fd7846a6080 RCX: 00007fd78448d169 [ 145.950226][ T8403] RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000008 [ 145.950239][ T8403] RBP: 00007fd782ad6090 R08: 000000000004ff9c R09: 0000000000000000 [ 145.950251][ T8403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.950268][ T8403] R13: 0000000000000001 R14: 00007fd7846a6080 R15: 00007ffdb89857a8 [ 145.950298][ T8403] [ 145.952576][ T8402] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 145.953946][ T8380] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 145.975513][ T8405] loop2: detected capacity change from 0 to 512 [ 146.031798][ T8402] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.1634: Failed to acquire dquot type 0 [ 146.042202][ T8405] ext4 filesystem being mounted at /360/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.051851][ T8402] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 146.064206][ T8407] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 146.086786][ T8402] EXT4-fs (loop4): 1 truncate cleaned up [ 146.194301][ T8405] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.1635: corrupted xattr block 32: invalid header [ 146.213302][ T8402] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.1634: corrupted xattr block 19: bad e_name length [ 146.215904][ T8405] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 146.228319][ T8402] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 146.240091][ T8405] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.1635: corrupted xattr block 32: invalid header [ 146.267442][ T8402] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.1634: corrupted xattr block 19: bad e_name length [ 146.281085][ T8405] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 146.333435][ T8405] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.1635: corrupted xattr block 32: invalid header [ 146.373997][ T3381] kernel write not supported for file /816/sched (pid: 3381 comm: kworker/0:4) [ 146.449388][ T8421] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1639'. [ 146.511049][ T8431] loop1: detected capacity change from 0 to 256 [ 146.529235][ T8431] vfat: Unknown parameter '' [ 146.543569][ T8435] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 146.680187][ T8444] capability: warning: `syz.1.1647' uses 32-bit capabilities (legacy support in use) [ 146.745342][ T8448] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 146.752860][ T8448] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 146.788512][ T29] kauditd_printk_skb: 110 callbacks suppressed [ 146.788527][ T29] audit: type=1326 audit(1744332521.283:3661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8443 comm="syz.1.1647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe34a8ed169 code=0x7ffc0000 [ 146.843842][ T3381] kernel write not supported for file /891/sched (pid: 3381 comm: kworker/0:4) [ 146.898869][ T29] audit: type=1326 audit(1744332521.323:3662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8443 comm="syz.1.1647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe34a8ed169 code=0x7ffc0000 [ 146.922273][ T29] audit: type=1326 audit(1744332521.323:3663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8443 comm="syz.1.1647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe34a8ed169 code=0x7ffc0000 [ 146.945768][ T29] audit: type=1326 audit(1744332521.323:3664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8443 comm="syz.1.1647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe34a8ed169 code=0x7ffc0000 [ 146.969686][ T29] audit: type=1326 audit(1744332521.323:3665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8443 comm="syz.1.1647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe34a8ed169 code=0x7ffc0000 [ 146.993172][ T29] audit: type=1326 audit(1744332521.323:3666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8443 comm="syz.1.1647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe34a8ed169 code=0x7ffc0000 [ 147.016749][ T29] audit: type=1326 audit(1744332521.323:3667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8443 comm="syz.1.1647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe34a8ed169 code=0x7ffc0000 [ 147.040292][ T29] audit: type=1326 audit(1744332521.323:3668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8443 comm="syz.1.1647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7fe34a8ed169 code=0x7ffc0000 [ 147.063973][ T29] audit: type=1326 audit(1744332521.323:3669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8443 comm="syz.1.1647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe34a8ed169 code=0x7ffc0000 [ 147.087436][ T29] audit: type=1326 audit(1744332521.323:3670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8443 comm="syz.1.1647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe34a8ed169 code=0x7ffc0000 [ 147.142006][ T8463] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(13) [ 147.148668][ T8463] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 147.156337][ T8463] vhci_hcd vhci_hcd.0: Device attached [ 147.363180][ T8474] loop2: detected capacity change from 0 to 512 [ 147.410016][ T8474] EXT4-fs: Ignoring removed nobh option [ 147.445561][ T8474] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 147.453728][ T3381] usb 9-1: new low-speed USB device number 5 using vhci_hcd [ 147.487144][ T8480] loop1: detected capacity change from 0 to 2048 [ 147.509340][ T8474] EXT4-fs error (device loop2): ext4_orphan_get:1390: inode #13: comm syz.2.1651: casefold flag without casefold feature [ 147.526141][ T8474] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz.2.1651: couldn't read orphan inode 13 (err -117) [ 147.551262][ T8480] EXT4-fs: Ignoring removed mblk_io_submit option [ 147.583678][ T8465] vhci_hcd: connection reset by peer [ 147.608849][ T3323] vhci_hcd: stop threads [ 147.613171][ T3323] vhci_hcd: release socket [ 147.617607][ T3323] vhci_hcd: disconnect device [ 147.638152][ T8485] EXT4-fs warning (device loop2): ext4_lookup:1801: Inconsistent encryption contexts: 2/12 [ 147.694542][ T8487] vlan2: entered allmulticast mode [ 147.739913][ T8485] EXT4-fs warning (device loop2): ext4_lookup:1801: Inconsistent encryption contexts: 2/12 [ 147.768908][ T8492] loop1: detected capacity change from 0 to 256 [ 147.775483][ T8492] vfat: Unknown parameter '' [ 147.823037][ T8485] EXT4-fs warning (device loop2): ext4_lookup:1801: Inconsistent encryption contexts: 2/12 [ 147.890774][ T8495] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 147.901921][ T8493] EXT4-fs warning (device loop2): ext4_lookup:1801: Inconsistent encryption contexts: 2/12 [ 147.957844][ T8485] EXT4-fs warning (device loop2): ext4_lookup:1801: Inconsistent encryption contexts: 2/12 [ 147.989270][ T8498] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1659'. [ 148.038976][ T8485] EXT4-fs warning (device loop2): ext4_lookup:1801: Inconsistent encryption contexts: 2/12 [ 148.127705][ T8485] EXT4-fs warning (device loop2): ext4_lookup:1801: Inconsistent encryption contexts: 2/12 [ 148.236144][ T3539] kernel write not supported for file /713/sched (pid: 3539 comm: kworker/0:6) [ 148.276024][ T8505] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 148.285962][ T8485] EXT4-fs warning (device loop2): ext4_lookup:1801: Inconsistent encryption contexts: 2/12 [ 148.311360][ T8485] EXT4-fs warning (device loop2): ext4_lookup:1801: Inconsistent encryption contexts: 2/12 [ 148.335270][ T8485] EXT4-fs warning (device loop2): ext4_lookup:1801: Inconsistent encryption contexts: 2/12 [ 148.402988][ T8509] loop1: detected capacity change from 0 to 512 [ 148.447447][ T8509] EXT4-fs error (device loop1): ext4_orphan_get:1416: comm syz.1.1663: bad orphan inode 15 [ 148.564200][ T8509] ext4_test_bit(bit=14, block=18) = 1 [ 148.569780][ T8509] is_bad_inode(inode)=0 [ 148.573940][ T8509] NEXT_ORPHAN(inode)=1023 [ 148.578334][ T8509] max_ino=32 [ 148.581574][ T8509] i_nlink=0 [ 148.588224][ T8509] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2962: inode #15: comm syz.1.1663: corrupted xattr block 19: invalid header [ 148.616848][ T8507] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1662'. [ 148.625812][ T8507] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1662'. [ 148.634903][ T8509] EXT4-fs warning (device loop1): ext4_evict_inode:279: xattr delete (err -117) [ 148.644704][ T8509] ext4 filesystem being mounted at /325/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 148.657973][ T8507] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1662'. [ 148.692355][ T8507] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1662'. [ 148.701351][ T8507] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1662'. [ 148.717622][ T8520] loop1: detected capacity change from 0 to 2048 [ 148.724632][ T8520] EXT4-fs: Ignoring removed mblk_io_submit option [ 148.725052][ T8507] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1662'. [ 148.776378][ T8507] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1662'. [ 148.785362][ T8507] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1662'. [ 148.798441][ T8507] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1662'. [ 148.868097][ T8534] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 149.082543][ T8543] loop1: detected capacity change from 0 to 2048 [ 149.090081][ T8543] EXT4-fs: Ignoring removed mblk_io_submit option [ 149.144707][ T8544] batadv2: entered allmulticast mode [ 149.247261][ T8543] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1672: bg 0: block 234: padding at end of block bitmap is not set [ 149.264545][ T8543] EXT4-fs (loop1): Remounting filesystem read-only [ 149.664988][ T8554] loop0: detected capacity change from 0 to 512 [ 149.690465][ T8554] ext4 filesystem being mounted at /351/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.787440][ T8558] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.1674: corrupted xattr block 32: invalid header [ 149.841397][ T8560] loop1: detected capacity change from 0 to 512 [ 149.869074][ T8560] journal_path: Non-blockdev passed as './bus' [ 149.875501][ T8560] EXT4-fs: error: could not find journal device path [ 149.894689][ T8558] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 149.924208][ T8558] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.1674: corrupted xattr block 32: invalid header [ 149.949842][ T8561] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.1674: corrupted xattr block 32: invalid header [ 149.970370][ T8558] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 149.980763][ T8558] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.1674: corrupted xattr block 32: invalid header [ 150.029282][ T8561] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 150.038317][ T8561] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.1674: corrupted xattr block 32: invalid header [ 150.070727][ T8558] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 150.349157][ T8570] loop0: detected capacity change from 0 to 2048 [ 150.355805][ T8570] EXT4-fs: Ignoring removed mblk_io_submit option [ 150.729734][ T8581] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 150.800322][ T8578] loop0: detected capacity change from 0 to 164 [ 150.880002][ T8585] loop1: detected capacity change from 0 to 1024 [ 150.918099][ T8585] ext4 filesystem being mounted at /333/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.011361][ T8591] loop1: detected capacity change from 0 to 256 [ 151.018766][ T8591] vfat: Unknown parameter '' [ 151.107903][ T8595] loop1: detected capacity change from 0 to 512 [ 151.114575][ T8595] journal_path: Non-blockdev passed as './bus' [ 151.120853][ T8595] EXT4-fs: error: could not find journal device path [ 151.200428][ T8597] loop3: detected capacity change from 0 to 512 [ 151.219916][ T8597] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 151.253543][ T8597] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.1687: Failed to acquire dquot type 0 [ 151.270897][ T8597] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 151.288200][ T8597] EXT4-fs (loop3): 1 truncate cleaned up [ 151.322884][ T8597] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.1687: corrupted xattr block 19: bad e_name length [ 151.345932][ T8597] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 151.357709][ T8597] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.1687: corrupted xattr block 19: bad e_name length [ 151.542439][ T8608] loop0: detected capacity change from 0 to 2048 [ 151.549660][ T8608] EXT4-fs: Ignoring removed mblk_io_submit option [ 151.777139][ T8616] loop3: detected capacity change from 0 to 512 [ 151.799233][ T8616] EXT4-fs error (device loop3): ext4_orphan_get:1416: comm syz.3.1694: bad orphan inode 15 [ 151.852527][ T8616] ext4_test_bit(bit=14, block=18) = 1 [ 151.857975][ T8616] is_bad_inode(inode)=0 [ 151.862213][ T8616] NEXT_ORPHAN(inode)=1023 [ 151.866557][ T8616] max_ino=32 [ 151.869859][ T8616] i_nlink=0 [ 151.874665][ T8616] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2962: inode #15: comm syz.3.1694: corrupted xattr block 19: invalid header [ 151.890873][ T8616] EXT4-fs warning (device loop3): ext4_evict_inode:279: xattr delete (err -117) [ 151.901924][ T8616] ext4 filesystem being mounted at /289/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 151.975739][ T8624] loop3: detected capacity change from 0 to 256 [ 151.982517][ T8624] vfat: Unknown parameter '' [ 151.984188][ T8622] loop1: detected capacity change from 0 to 512 [ 152.003221][ T8622] EXT4-fs error (device loop1): ext4_orphan_get:1416: comm syz.1.1697: bad orphan inode 15 [ 152.015555][ T8622] ext4_test_bit(bit=14, block=18) = 1 [ 152.021008][ T8622] is_bad_inode(inode)=0 [ 152.025279][ T8622] NEXT_ORPHAN(inode)=1023 [ 152.029687][ T8622] max_ino=32 [ 152.032930][ T8622] i_nlink=0 [ 152.036874][ T8622] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2962: inode #15: comm syz.1.1697: corrupted xattr block 19: invalid header [ 152.050773][ T8622] EXT4-fs warning (device loop1): ext4_evict_inode:279: xattr delete (err -117) [ 152.062460][ T8622] ext4 filesystem being mounted at /336/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 152.103381][ T8632] loop1: detected capacity change from 0 to 256 [ 152.110364][ T8632] vfat: Unknown parameter '' [ 152.191227][ T8638] loop1: detected capacity change from 0 to 512 [ 152.197916][ T8638] EXT4-fs: Ignoring removed nomblk_io_submit option [ 152.207046][ T8638] EXT4-fs: Ignoring removed mblk_io_submit option [ 152.215299][ T8638] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 152.226390][ T8638] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 152.234972][ T8638] EXT4-fs (loop1): 1 truncate cleaned up [ 152.253796][ T29] kauditd_printk_skb: 147 callbacks suppressed [ 152.253813][ T29] audit: type=1400 audit(1744332526.754:3816): avc: denied { remount } for pid=8637 comm="syz.1.1702" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 152.277444][ T8645] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 152.280465][ T8638] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 152.347522][ T8649] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 152.357170][ T29] audit: type=1400 audit(1744332526.854:3817): avc: denied { relabelto } for pid=8648 comm="syz.1.1706" name="339" dev="tmpfs" ino=1839 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 152.384459][ T8649] loop1: detected capacity change from 0 to 1024 [ 152.386092][ T29] audit: type=1400 audit(1744332526.854:3818): avc: denied { associate } for pid=8648 comm="syz.1.1706" name="339" dev="tmpfs" ino=1839 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 152.391199][ T8649] EXT4-fs: Ignoring removed bh option [ 152.418044][ T29] audit: type=1400 audit(1744332526.864:3819): avc: denied { write } for pid=8648 comm="syz.1.1706" name="339" dev="tmpfs" ino=1839 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 152.449525][ T29] audit: type=1400 audit(1744332526.864:3820): avc: denied { add_name } for pid=8648 comm="syz.1.1706" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 152.449545][ T8649] EXT4-fs: inline encryption not supported [ 152.474094][ T29] audit: type=1400 audit(1744332526.864:3821): avc: denied { associate } for pid=8648 comm="syz.1.1706" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 152.474182][ T3381] usb 9-1: enqueue for inactive port 0 [ 152.479986][ T8649] EXT4-fs: Ignoring removed i_version option [ 152.503848][ T3381] usb 9-1: enqueue for inactive port 0 [ 152.510736][ T8649] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 152.520275][ T29] audit: type=1400 audit(1744332526.894:3822): avc: denied { read } for pid=8648 comm="syz.1.1706" name="file0" dev="tmpfs" ino=1844 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 152.551055][ T29] audit: type=1400 audit(1744332526.894:3823): avc: denied { mounton } for pid=8648 comm="syz.1.1706" path="/339" dev="tmpfs" ino=1839 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 152.580900][ T8649] EXT4-fs error (device loop1): ext4_map_blocks:674: inode #3: block 2: comm syz.1.1706: lblock 2 mapped to illegal pblock 2 (length 1) [ 152.595010][ T3381] vhci_hcd: vhci_device speed not set [ 152.595948][ T8651] loop0: detected capacity change from 0 to 512 [ 152.600735][ T8649] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 152.607190][ T8651] journal_path: Non-blockdev passed as './bus' [ 152.618513][ T8649] EXT4-fs error (device loop1): ext4_map_blocks:674: inode #3: block 48: comm syz.1.1706: lblock 0 mapped to illegal pblock 48 (length 1) [ 152.621012][ T8651] EXT4-fs: error: could not find journal device path [ 152.638180][ T8649] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 152.650756][ T8649] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.1706: Failed to acquire dquot type 0 [ 152.662709][ T8649] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 152.672285][ T8649] EXT4-fs error (device loop1): ext4_evict_inode:259: inode #11: comm syz.1.1706: mark_inode_dirty error [ 152.683939][ T8649] EXT4-fs warning (device loop1): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 152.694372][ T8649] EXT4-fs (loop1): 1 orphan inode deleted [ 152.699409][ T8654] loop0: detected capacity change from 0 to 256 [ 152.706770][ T8654] vfat: Unknown parameter '' [ 152.708667][ T51] EXT4-fs error (device loop1): ext4_map_blocks:674: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 152.741628][ T51] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:3: Failed to release dquot type 0 [ 152.761830][ T8649] team0 (unregistering): Port device team_slave_0 removed [ 152.771284][ T8649] team0 (unregistering): Port device team_slave_1 removed [ 152.852879][ T3306] EXT4-fs error (device loop1): __ext4_get_inode_loc:4449: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 152.865944][ T3306] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 152.888687][ T3306] EXT4-fs error (device loop1): ext4_quota_off:7219: inode #3: comm syz-executor: mark_inode_dirty error [ 152.925398][ T8662] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 152.935116][ T8663] loop3: detected capacity change from 0 to 512 [ 152.951251][ T8663] EXT4-fs: Ignoring removed nobh option [ 152.969964][ T8667] netlink: 'syz.1.1713': attribute type 1 has an invalid length. [ 152.973203][ T8663] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 152.996659][ T8663] EXT4-fs error (device loop3): ext4_orphan_get:1390: inode #13: comm syz.3.1712: casefold flag without casefold feature [ 153.032905][ T8667] bond_slave_1: mtu less than device minimum [ 153.055968][ T8663] EXT4-fs error (device loop3): ext4_orphan_get:1395: comm syz.3.1712: couldn't read orphan inode 13 (err -117) [ 153.126108][ T8679] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 153.166717][ T8663] EXT4-fs warning (device loop3): ext4_lookup:1801: Inconsistent encryption contexts: 2/12 [ 153.210810][ T8683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.219647][ T8683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.521563][ T8695] __nla_validate_parse: 4 callbacks suppressed [ 153.521604][ T8695] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1722'. [ 153.543975][ T8695] team0 (unregistering): Port device team_slave_0 removed [ 153.572444][ T8695] team0 (unregistering): Port device team_slave_1 removed [ 153.647066][ T8700] netlink: 'syz.2.1724': attribute type 1 has an invalid length. [ 153.711091][ T8700] bond_slave_1: mtu less than device minimum [ 153.753620][ T8710] loop4: detected capacity change from 0 to 512 [ 153.800263][ T8710] ext4 filesystem being mounted at /340/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.875730][ T8707] loop1: detected capacity change from 0 to 512 [ 153.913775][ T8707] ext4 filesystem being mounted at /347/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.940779][ T8721] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.1728: corrupted xattr block 32: invalid header [ 153.943679][ T8714] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1729'. [ 153.966341][ T8714] batadv2: entered allmulticast mode [ 153.973378][ T8721] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 153.982513][ T8721] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.1728: corrupted xattr block 32: invalid header [ 154.003650][ T8722] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.1728: corrupted xattr block 32: invalid header [ 154.017284][ T8721] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 154.020816][ T8722] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 154.036888][ T8721] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.1728: corrupted xattr block 32: invalid header [ 154.061278][ T8721] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 154.119123][ T8722] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.1728: corrupted xattr block 32: invalid header [ 154.138140][ T8731] loop3: detected capacity change from 0 to 512 [ 154.144839][ T8731] EXT4-fs: Ignoring removed nobh option [ 154.157232][ T8733] loop1: detected capacity change from 0 to 512 [ 154.164526][ T8731] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 154.174416][ T8733] EXT4-fs error (device loop1): ext4_orphan_get:1416: comm syz.1.1734: bad orphan inode 15 [ 154.176275][ T8731] EXT4-fs error (device loop3): ext4_orphan_get:1390: inode #13: comm syz.3.1733: casefold flag without casefold feature [ 154.192335][ T8733] ext4_test_bit(bit=14, block=18) = 1 [ 154.202607][ T8733] is_bad_inode(inode)=0 [ 154.206813][ T8733] NEXT_ORPHAN(inode)=1023 [ 154.211286][ T8733] max_ino=32 [ 154.214653][ T8733] i_nlink=0 [ 154.223056][ T8710] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1728'. [ 154.250682][ T8733] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2962: inode #15: comm syz.1.1734: corrupted xattr block 19: invalid header [ 154.257418][ T8731] EXT4-fs error (device loop3): ext4_orphan_get:1395: comm syz.3.1733: couldn't read orphan inode 13 (err -117) [ 154.289194][ T8733] EXT4-fs warning (device loop1): ext4_evict_inode:279: xattr delete (err -117) [ 154.305630][ T8733] ext4 filesystem being mounted at /350/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 154.339364][ T8731] EXT4-fs warning (device loop3): ext4_lookup:1801: Inconsistent encryption contexts: 2/12 [ 154.409803][ T8748] loop4: detected capacity change from 0 to 736 [ 154.412828][ T8752] netlink: 'syz.3.1739': attribute type 1 has an invalid length. [ 154.464888][ T8748] rock: directory entry would overflow storage [ 154.471433][ T8748] rock: sig=0x5850, size=36, remaining=14 [ 154.482088][ T8752] bond_slave_1: mtu less than device minimum [ 154.526683][ T8756] loop1: detected capacity change from 0 to 512 [ 154.582727][ T8756] ext4 filesystem being mounted at /352/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.853928][ T8773] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.1742: corrupted xattr block 32: invalid header [ 154.925755][ T8775] loop2: detected capacity change from 0 to 512 [ 154.937333][ T8775] EXT4-fs: Ignoring removed nobh option [ 155.268857][ T8775] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 155.275524][ T8773] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 155.290085][ T8775] EXT4-fs error (device loop2): ext4_orphan_get:1390: inode #13: comm syz.2.1747: casefold flag without casefold feature [ 155.304397][ T8773] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.1742: corrupted xattr block 32: invalid header [ 155.321927][ T8773] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 155.329124][ T8775] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz.2.1747: couldn't read orphan inode 13 (err -117) [ 155.332490][ T8773] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.1742: corrupted xattr block 32: invalid header [ 155.475981][ T8775] EXT4-fs warning (device loop2): ext4_lookup:1801: Inconsistent encryption contexts: 2/12 [ 155.585275][ T8794] xt_CT: You must specify a L4 protocol and not use inversions on it [ 155.595419][ T8796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.610817][ T8796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.058011][ T8818] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 156.065464][ T8818] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 156.248969][ T8822] loop3: detected capacity change from 0 to 512 [ 156.263911][ T8822] EXT4-fs: Ignoring removed nobh option [ 156.298419][ T8822] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 156.357748][ T8828] loop0: detected capacity change from 0 to 736 [ 156.364609][ T8822] EXT4-fs error (device loop3): ext4_orphan_get:1390: inode #13: comm syz.3.1765: casefold flag without casefold feature [ 156.456778][ T8822] EXT4-fs error (device loop3): ext4_orphan_get:1395: comm syz.3.1765: couldn't read orphan inode 13 (err -117) [ 156.483871][ T8828] rock: directory entry would overflow storage [ 156.490155][ T8828] rock: sig=0x5850, size=36, remaining=14 [ 156.523580][ T8822] EXT4-fs warning (device loop3): ext4_lookup:1801: Inconsistent encryption contexts: 2/12 [ 156.575176][ T8830] xt_CT: You must specify a L4 protocol and not use inversions on it [ 156.622997][ T8834] pim6reg: entered allmulticast mode [ 156.634142][ T8835] loop0: detected capacity change from 0 to 2048 [ 156.650562][ T8834] IPv6: NLM_F_CREATE should be specified when creating new route [ 156.662615][ T8834] Falling back ldisc for ptm0. [ 156.817040][ T8835] EXT4-fs: Ignoring removed mblk_io_submit option [ 156.839766][ T8841] loop3: detected capacity change from 0 to 2048 [ 156.847790][ T8846] Invalid logical block size (7) [ 156.866735][ T8841] EXT4-fs: Ignoring removed mblk_io_submit option [ 157.005320][ T8855] loop1: detected capacity change from 0 to 512 [ 157.059995][ T8857] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1778'. [ 157.078243][ T8855] ext4 filesystem being mounted at /358/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.159047][ T8863] loop3: detected capacity change from 0 to 512 [ 157.228387][ T8864] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.1777: corrupted xattr block 32: invalid header [ 157.237318][ T8863] EXT4-fs: Ignoring removed nobh option [ 157.299905][ T8863] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 157.319390][ T8863] EXT4-fs error (device loop3): ext4_orphan_get:1390: inode #13: comm syz.3.1780: casefold flag without casefold feature [ 157.336634][ T8869] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1777'. [ 157.358886][ T8863] EXT4-fs error (device loop3): ext4_orphan_get:1395: comm syz.3.1780: couldn't read orphan inode 13 (err -117) [ 157.379554][ T8868] loop0: detected capacity change from 0 to 1024 [ 157.386341][ T8864] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 157.407346][ T8863] EXT4-fs warning (device loop3): ext4_lookup:1801: Inconsistent encryption contexts: 2/12 [ 157.418371][ T8864] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.1777: corrupted xattr block 32: invalid header [ 157.454868][ T8868] ext4 filesystem being mounted at /384/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.487963][ T8865] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.1777: corrupted xattr block 32: invalid header [ 157.527717][ T8864] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 157.623017][ T8864] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.1777: corrupted xattr block 32: invalid header [ 157.652401][ T8865] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 157.667789][ T8864] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 157.695846][ T8865] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.1777: corrupted xattr block 32: invalid header [ 157.742855][ T8876] loop0: detected capacity change from 0 to 736 [ 157.790352][ T8876] rock: directory entry would overflow storage [ 157.796642][ T8876] rock: sig=0x5850, size=36, remaining=14 [ 157.943332][ T29] kauditd_printk_skb: 111 callbacks suppressed [ 157.943347][ T29] audit: type=1400 audit(1744332532.445:3934): avc: denied { write } for pid=8883 comm="syz.2.1787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 158.023056][ T8886] loop4: detected capacity change from 0 to 2048 [ 158.030013][ T8886] EXT4-fs: Ignoring removed mblk_io_submit option [ 158.037527][ T29] audit: type=1326 audit(1744332532.535:3935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8887 comm="syz.1.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe34a8ed169 code=0x7ffc0000 [ 158.061086][ T29] audit: type=1326 audit(1744332532.535:3936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8887 comm="syz.1.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe34a8ed169 code=0x7ffc0000 [ 158.085957][ T29] audit: type=1326 audit(1744332532.585:3937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8887 comm="syz.1.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe34a8ed169 code=0x7ffc0000 [ 158.109508][ T29] audit: type=1326 audit(1744332532.585:3938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8887 comm="syz.1.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe34a8ed169 code=0x7ffc0000 [ 158.133008][ T29] audit: type=1326 audit(1744332532.585:3939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8887 comm="syz.1.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe34a8ed169 code=0x7ffc0000 [ 158.156458][ T29] audit: type=1326 audit(1744332532.585:3940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8887 comm="syz.1.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe34a8ed169 code=0x7ffc0000 [ 158.179949][ T29] audit: type=1326 audit(1744332532.585:3941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8887 comm="syz.1.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe34a8ed169 code=0x7ffc0000 [ 158.203474][ T29] audit: type=1326 audit(1744332532.585:3942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8887 comm="syz.1.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe34a8ed169 code=0x7ffc0000 [ 158.227068][ T29] audit: type=1326 audit(1744332532.585:3943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8887 comm="syz.1.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe34a8ed169 code=0x7ffc0000 [ 158.348384][ T8903] loop2: detected capacity change from 0 to 164 [ 158.375350][ T8903] ISOFS: unable to read i-node block [ 158.380746][ T8903] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 158.404873][ T8905] loop3: detected capacity change from 0 to 736 [ 158.454234][ T8905] rock: directory entry would overflow storage [ 158.460539][ T8905] rock: sig=0x5850, size=36, remaining=14 [ 158.461735][ T8909] loop1: detected capacity change from 0 to 512 [ 158.473060][ T8909] EXT4-fs: Ignoring removed nomblk_io_submit option [ 158.479954][ T8909] EXT4-fs: Ignoring removed mblk_io_submit option [ 158.520416][ T8909] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 158.531278][ T3381] kernel write not supported for file /774/sched (pid: 3381 comm: kworker/0:4) [ 158.535245][ T8920] loop0: detected capacity change from 0 to 512 [ 158.547125][ T8920] EXT4-fs: Ignoring removed nobh option [ 158.551684][ T8912] Invalid logical block size (7) [ 158.553768][ T8909] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 158.561386][ T8920] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 158.587553][ T8920] EXT4-fs error (device loop0): ext4_orphan_get:1390: inode #13: comm syz.0.1801: casefold flag without casefold feature [ 158.594758][ T8909] EXT4-fs (loop1): 1 truncate cleaned up [ 158.600985][ T8920] EXT4-fs error (device loop0): ext4_orphan_get:1395: comm syz.0.1801: couldn't read orphan inode 13 (err -117) [ 158.619438][ T8920] EXT4-fs mount: 96 callbacks suppressed [ 158.619453][ T8920] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.625509][ T8909] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.673199][ T8920] EXT4-fs warning (device loop0): ext4_lookup:1801: Inconsistent encryption contexts: 2/12 [ 158.694266][ T8909] FAULT_INJECTION: forcing a failure. [ 158.694266][ T8909] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 158.707407][ T8909] CPU: 1 UID: 0 PID: 8909 Comm: syz.1.1797 Not tainted 6.15.0-rc1-syzkaller-00095-g2eb959eeecc6 #0 PREEMPT(voluntary) [ 158.707454][ T8909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 158.707469][ T8909] Call Trace: [ 158.707477][ T8909] [ 158.707486][ T8909] dump_stack_lvl+0xf6/0x150 [ 158.707512][ T8909] dump_stack+0x15/0x1a [ 158.707577][ T8909] should_fail_ex+0x261/0x270 [ 158.707638][ T8909] should_fail+0xb/0x10 [ 158.707665][ T8909] should_fail_usercopy+0x1a/0x20 [ 158.707698][ T8909] _copy_from_user+0x1c/0xa0 [ 158.707757][ T8909] __se_sys_mount+0x11b/0x2e0 [ 158.707794][ T8909] ? do_mkdirat+0x29d/0x2e0 [ 158.707834][ T8909] __x64_sys_mount+0x67/0x80 [ 158.707872][ T8909] x64_sys_call+0xd11/0x2e10 [ 158.707899][ T8909] do_syscall_64+0xc9/0x1c0 [ 158.707936][ T8909] ? clear_bhb_loop+0x25/0x80 [ 158.708014][ T8909] ? clear_bhb_loop+0x25/0x80 [ 158.708041][ T8909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.708067][ T8909] RIP: 0033:0x7fe34a8ee90a [ 158.708082][ T8909] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.708138][ T8909] RSP: 002b:00007fe348f56e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 158.708158][ T8909] RAX: ffffffffffffffda RBX: 00007fe348f56ef0 RCX: 00007fe34a8ee90a [ 158.708174][ T8909] RDX: 0000200000000f40 RSI: 0000200000000f00 RDI: 0000000000000000 [ 158.708186][ T8909] RBP: 0000200000000f40 R08: 00007fe348f56ef0 R09: 0000000001a4a421 [ 158.708198][ T8909] R10: 0000000001a4a421 R11: 0000000000000246 R12: 0000200000000f00 [ 158.708213][ T8909] R13: 00007fe348f56eb0 R14: 0000000000000000 R15: 00002000000008c0 [ 158.708236][ T8909] [ 158.898346][ T8924] xt_CT: You must specify a L4 protocol and not use inversions on it [ 158.907197][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.911880][ T8909] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 158.952334][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.977968][ T8929] loop3: detected capacity change from 0 to 2048 [ 158.984790][ T8929] EXT4-fs: Ignoring removed mblk_io_submit option [ 159.009971][ T8929] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.070493][ T8946] loop0: detected capacity change from 0 to 736 [ 159.090998][ T8946] rock: directory entry would overflow storage [ 159.097228][ T8946] rock: sig=0x5850, size=36, remaining=14 [ 159.121437][ T8948] loop1: detected capacity change from 0 to 256 [ 159.132230][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.142177][ T8950] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1812'. [ 159.153704][ T8948] vfat: Unknown parameter '' [ 159.280106][ T8957] xt_CT: You must specify a L4 protocol and not use inversions on it [ 159.365389][ T8965] netlink: 'syz.3.1818': attribute type 2 has an invalid length. [ 159.389165][ T8955] loop4: detected capacity change from 0 to 764 [ 159.400451][ T8967] loop0: detected capacity change from 0 to 512 [ 159.440557][ T8967] journal_path: Non-blockdev passed as './bus' [ 159.446923][ T8967] EXT4-fs: error: could not find journal device path [ 159.492154][ T8973] loop3: detected capacity change from 0 to 2048 [ 159.501577][ T8955] Symlink component flag not implemented [ 159.510735][ T8955] Symlink component flag not implemented (101) [ 159.519285][ T8973] EXT4-fs: Ignoring removed mblk_io_submit option [ 159.551148][ T8973] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.564326][ T8977] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1824'. [ 159.626856][ T8955] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.649056][ T8981] loop0: detected capacity change from 0 to 736 [ 159.668944][ T8983] loop1: detected capacity change from 0 to 256 [ 159.705483][ T8987] loop2: detected capacity change from 0 to 512 [ 159.712791][ T8983] vfat: Unknown parameter '' [ 159.718405][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.744237][ T8981] rock: directory entry would overflow storage [ 159.750484][ T8981] rock: sig=0x5850, size=36, remaining=14 [ 159.790477][ T8991] xt_CT: You must specify a L4 protocol and not use inversions on it [ 159.799492][ T8987] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.819512][ T8987] ext4 filesystem being mounted at /383/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 159.841985][ T8995] loop4: detected capacity change from 0 to 512 [ 159.874940][ T9005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1835'. [ 159.892845][ T8995] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.917439][ T8995] ext4 filesystem being mounted at /359/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.934025][ T9009] loop0: detected capacity change from 0 to 512 [ 159.940754][ T9009] journal_path: Non-blockdev passed as './bus' [ 159.946962][ T9009] EXT4-fs: error: could not find journal device path [ 160.007360][ T9011] Invalid logical block size (7) [ 160.069748][ T9020] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.1833: corrupted xattr block 32: invalid header [ 160.083541][ T9020] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 160.083576][ T9018] loop0: detected capacity change from 0 to 2048 [ 160.101267][ T9018] EXT4-fs: Ignoring removed mblk_io_submit option [ 160.102407][ T9020] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.1833: corrupted xattr block 32: invalid header [ 160.161107][ T9020] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 160.170314][ T9020] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.1833: corrupted xattr block 32: invalid header [ 160.202784][ T9018] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.333629][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.362091][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.386279][ T9026] loop4: detected capacity change from 0 to 256 [ 160.434702][ T9026] vfat: Unknown parameter '' [ 160.448151][ T9028] loop0: detected capacity change from 0 to 736 [ 160.485181][ T9028] rock: directory entry would overflow storage [ 160.491425][ T9028] rock: sig=0x5850, size=36, remaining=14 [ 160.678749][ T9033] loop4: detected capacity change from 0 to 256 [ 160.707648][ T9033] vfat: Unknown parameter '' [ 160.798853][ T9038] loop0: detected capacity change from 0 to 1024 [ 160.969631][ T9053] loop4: detected capacity change from 0 to 736 [ 160.998845][ T9055] loop3: detected capacity change from 0 to 2048 [ 161.010132][ T9057] loop0: detected capacity change from 0 to 256 [ 161.016655][ T9057] vfat: Unknown parameter '' [ 161.017332][ T9055] EXT4-fs: Ignoring removed mblk_io_submit option [ 161.036420][ T9053] rock: directory entry would overflow storage [ 161.042712][ T9053] rock: sig=0x5850, size=36, remaining=14 [ 161.069857][ T9055] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.140847][ T9066] pim6reg: entered allmulticast mode [ 161.155129][ T9066] IPv6: NLM_F_CREATE should be specified when creating new route [ 161.214274][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.258174][ T9076] sch_tbf: burst 2976 is lower than device lo mtu (65550) ! [ 161.293984][ T9081] loop1: detected capacity change from 0 to 512 [ 161.310457][ T9081] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 161.358079][ T9081] EXT4-fs (loop1): 1 truncate cleaned up [ 161.366645][ T9089] loop3: detected capacity change from 0 to 736 [ 161.373364][ T9081] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.376456][ T9085] loop4: detected capacity change from 0 to 2048 [ 161.385571][ T9083] Invalid logical block size (7) [ 161.444560][ T9089] rock: directory entry would overflow storage [ 161.450871][ T9089] rock: sig=0x5850, size=36, remaining=14 [ 161.454645][ T9085] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.480946][ T9094] loop3: detected capacity change from 0 to 256 [ 161.487622][ T9094] vfat: Unknown parameter '' [ 161.514114][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.630147][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.714251][ T9111] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 161.721793][ T9111] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 162.040668][ T9118] loop3: detected capacity change from 0 to 736 [ 162.146772][ T9118] rock: directory entry would overflow storage [ 162.153053][ T9118] rock: sig=0x5850, size=36, remaining=14 [ 162.463306][ T9123] loop3: detected capacity change from 0 to 2048 [ 162.498133][ T9123] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.656342][ T9128] loop4: detected capacity change from 0 to 256 [ 162.669829][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.677378][ T9128] vfat: Unknown parameter '' [ 162.872109][ T9137] delete_channel: no stack [ 162.879031][ T9137] delete_channel: no stack [ 162.922220][ T9137] loop4: detected capacity change from 0 to 256 [ 163.133042][ T9144] FAULT_INJECTION: forcing a failure. [ 163.133042][ T9144] name failslab, interval 1, probability 0, space 0, times 0 [ 163.145740][ T9144] CPU: 0 UID: 0 PID: 9144 Comm: syz.0.1888 Not tainted 6.15.0-rc1-syzkaller-00095-g2eb959eeecc6 #0 PREEMPT(voluntary) [ 163.145769][ T9144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 163.145781][ T9144] Call Trace: [ 163.145788][ T9144] [ 163.145795][ T9144] dump_stack_lvl+0xf6/0x150 [ 163.145821][ T9144] dump_stack+0x15/0x1a [ 163.145842][ T9144] should_fail_ex+0x261/0x270 [ 163.145872][ T9144] should_failslab+0x8f/0xb0 [ 163.145906][ T9144] kmem_cache_alloc_noprof+0x59/0x340 [ 163.145932][ T9144] ? vm_area_alloc+0x2c/0xb0 [ 163.145952][ T9144] ? vma_merge_new_range+0x2df/0x340 [ 163.145983][ T9144] vm_area_alloc+0x2c/0xb0 [ 163.146003][ T9144] mmap_region+0x83e/0x1490 [ 163.146050][ T9144] do_mmap+0x9ef/0xc80 [ 163.146084][ T9144] __se_sys_remap_file_pages+0x767/0x800 [ 163.146125][ T9144] ? fput+0x99/0xd0 [ 163.146150][ T9144] ? ksys_write+0x180/0x1b0 [ 163.146184][ T9144] __x64_sys_remap_file_pages+0x67/0x80 [ 163.146224][ T9144] x64_sys_call+0x29b9/0x2e10 [ 163.146245][ T9144] do_syscall_64+0xc9/0x1c0 [ 163.146275][ T9144] ? clear_bhb_loop+0x25/0x80 [ 163.146297][ T9144] ? clear_bhb_loop+0x25/0x80 [ 163.146322][ T9144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.146354][ T9144] RIP: 0033:0x7fb51be2d169 [ 163.146371][ T9144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.146389][ T9144] RSP: 002b:00007fb51a497038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 163.146409][ T9144] RAX: ffffffffffffffda RBX: 00007fb51c045fa0 RCX: 00007fb51be2d169 [ 163.146422][ T9144] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000800000 [ 163.146434][ T9144] RBP: 00007fb51a497090 R08: 0000000000000000 R09: 0000000000000000 [ 163.146445][ T9144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.146456][ T9144] R13: 0000000000000000 R14: 00007fb51c045fa0 R15: 00007fff9de35988 [ 163.146473][ T9144] [ 163.360111][ T36] kernel write not supported for file /912/sched (pid: 36 comm: kworker/1:1) [ 163.392067][ T9148] loop0: detected capacity change from 0 to 736 [ 163.424699][ T9148] rock: directory entry would overflow storage [ 163.424713][ T9148] rock: sig=0x5850, size=36, remaining=14 [ 163.463939][ T9151] xt_CT: You must specify a L4 protocol and not use inversions on it [ 163.512826][ T9155] loop4: detected capacity change from 0 to 512 [ 163.513076][ T9155] journal_path: Non-blockdev passed as './bus' [ 163.513092][ T9155] EXT4-fs: error: could not find journal device path [ 163.532720][ T9153] loop0: detected capacity change from 0 to 2048 [ 163.549977][ T9153] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.640393][ T9161] loop4: detected capacity change from 0 to 256 [ 163.653870][ T9161] vfat: Unknown parameter '' [ 163.688709][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.718527][ T29] kauditd_printk_skb: 110 callbacks suppressed [ 163.718608][ T29] audit: type=1400 audit(1744332538.215:4054): avc: denied { ioctl } for pid=9162 comm="syz.3.1897" path="socket:[25641]" dev="sockfs" ino=25641 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 163.763850][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.779841][ T9168] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1899'. [ 163.826679][ T9163] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 163.838771][ T9163] bond0: (slave lo): Error: Device can not be enslaved while up [ 163.847622][ T29] audit: type=1400 audit(1744332538.315:4055): avc: denied { ioctl } for pid=9162 comm="syz.3.1897" path="socket:[25661]" dev="sockfs" ino=25661 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 163.850778][ T9178] loop1: detected capacity change from 0 to 736 [ 163.896831][ T9173] Invalid logical block size (7) [ 163.904532][ T9178] rock: directory entry would overflow storage [ 163.910864][ T9178] rock: sig=0x5850, size=36, remaining=14 [ 163.939575][ T9181] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1900'. [ 163.955323][ T9180] loop3: detected capacity change from 0 to 1024 [ 163.965521][ T9183] loop1: detected capacity change from 0 to 512 [ 163.969003][ T9186] loop0: detected capacity change from 0 to 512 [ 163.978610][ T9186] journal_path: Non-blockdev passed as './bus' [ 163.984909][ T9186] EXT4-fs: error: could not find journal device path [ 164.009546][ T9180] journal_path: Lookup failure for './file0' [ 164.015631][ T9180] EXT4-fs: error: could not find journal device path [ 164.035297][ T9183] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.066575][ T29] audit: type=1400 audit(1744332538.526:4056): avc: denied { shutdown } for pid=9162 comm="syz.3.1897" laddr=::ac14:14aa lport=44703 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 164.092652][ T9183] ext4 filesystem being mounted at /384/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.190204][ T29] audit: type=1326 audit(1744332538.686:4057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9193 comm="syz.0.1906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb51be2d169 code=0x7ffc0000 [ 164.213802][ T29] audit: type=1326 audit(1744332538.686:4058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9193 comm="syz.0.1906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb51be2d169 code=0x7ffc0000 [ 164.237448][ T29] audit: type=1326 audit(1744332538.686:4059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9193 comm="syz.0.1906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb51be2d169 code=0x7ffc0000 [ 164.237924][ T9196] loop3: detected capacity change from 0 to 2048 [ 164.260909][ T29] audit: type=1326 audit(1744332538.686:4060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9193 comm="syz.0.1906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb51be2d169 code=0x7ffc0000 [ 164.270069][ T9183] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.1903: corrupted xattr block 32: invalid header [ 164.290624][ T29] audit: type=1326 audit(1744332538.686:4061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9193 comm="syz.0.1906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb51be2d169 code=0x7ffc0000 [ 164.290662][ T29] audit: type=1326 audit(1744332538.686:4062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9193 comm="syz.0.1906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb51be2d169 code=0x7ffc0000 [ 164.330337][ T9183] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 164.350760][ T29] audit: type=1326 audit(1744332538.686:4063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9193 comm="syz.0.1906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fb51be2d169 code=0x7ffc0000 [ 164.398169][ T9199] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1903'. [ 164.407766][ T9183] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.1903: corrupted xattr block 32: invalid header [ 164.408083][ T9198] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.1903: corrupted xattr block 32: invalid header [ 164.431776][ T9196] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.499197][ T9198] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 164.516427][ T9183] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 164.532721][ T9198] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.1903: corrupted xattr block 32: invalid header [ 164.546499][ T9183] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.1903: corrupted xattr block 32: invalid header [ 164.562311][ T9183] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 164.620721][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.682431][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.719684][ T9206] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 164.727167][ T9206] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 164.734647][ T9209] loop1: detected capacity change from 0 to 2048 [ 164.751182][ T9208] loop4: detected capacity change from 0 to 256 [ 164.759249][ T9209] EXT4-fs: Ignoring removed bh option [ 164.780140][ T9208] vfat: Unknown parameter '' [ 164.788504][ T9213] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1908'. [ 164.801003][ T9209] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.831590][ T9209] SELinux: Context : is not valid (left unmapped). [ 164.838642][ T9209] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 164.878406][ T9213] batadv1: entered allmulticast mode [ 164.959570][ T9209] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1911'. [ 165.177973][ T9221] loop4: detected capacity change from 0 to 736 [ 165.253198][ T9221] rock: directory entry would overflow storage [ 165.259480][ T9221] rock: sig=0x5850, size=36, remaining=14 [ 165.308937][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.417287][ T9233] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1918'. [ 165.460369][ T9235] loop1: detected capacity change from 0 to 128 [ 165.474180][ T9235] EXT4-fs: test_dummy_encryption option not supported [ 165.559549][ T9241] loop2: detected capacity change from 0 to 256 [ 165.566730][ T9241] vfat: Unknown parameter '' [ 165.615527][ T9245] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1921'. [ 166.066431][ T9250] loop2: detected capacity change from 0 to 736 [ 166.166337][ T9250] rock: directory entry would overflow storage [ 166.172779][ T9250] rock: sig=0x5850, size=36, remaining=14 [ 166.252753][ T9252] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 166.447943][ T9255] xt_CT: You must specify a L4 protocol and not use inversions on it [ 166.458902][ T9257] Invalid logical block size (7) [ 166.590145][ T9271] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1932'. [ 166.668841][ T36] IPVS: starting estimator thread 0... [ 166.697640][ T9283] netlink: 'syz.2.1935': attribute type 21 has an invalid length. [ 166.713009][ T9283] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1935'. [ 166.777154][ T9279] IPVS: using max 2304 ests per chain, 115200 per kthread [ 166.787303][ T9286] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1936'. [ 166.818964][ T9288] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 166.826562][ T9288] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 167.506108][ T9295] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 167.513596][ T9295] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 167.948821][ T9311] loop1: detected capacity change from 0 to 512 [ 168.340633][ T9311] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.388275][ T9311] ext4 filesystem being mounted at /393/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.489599][ T9327] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.1946: corrupted xattr block 32: invalid header [ 168.541948][ T9327] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 168.578886][ T9331] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1951'. [ 168.609585][ T9327] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.1946: corrupted xattr block 32: invalid header [ 168.658363][ T9330] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.1946: corrupted xattr block 32: invalid header [ 168.671867][ T9327] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 168.696315][ T9330] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 168.705416][ T9330] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.1946: corrupted xattr block 32: invalid header [ 168.757856][ T9327] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.1946: corrupted xattr block 32: invalid header [ 168.847035][ T9327] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 168.884557][ T9339] loop0: detected capacity change from 0 to 256 [ 168.908302][ T9339] vfat: Unknown parameter '' [ 168.916193][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.984015][ T9348] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1959'. [ 169.027155][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 169.027172][ T29] audit: type=1400 audit(1744332543.506:4089): avc: denied { read } for pid=9342 comm="syz.2.1958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 169.053816][ T29] audit: type=1400 audit(1744332543.526:4090): avc: denied { connect } for pid=9352 comm="syz.3.1961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 169.125737][ T29] audit: type=1326 audit(1744332543.576:4091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9354 comm="syz.0.1962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb51be2d169 code=0x7ffc0000 [ 169.149232][ T29] audit: type=1326 audit(1744332543.576:4092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9354 comm="syz.0.1962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7fb51be2d169 code=0x7ffc0000 [ 169.172788][ T29] audit: type=1326 audit(1744332543.576:4093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9354 comm="syz.0.1962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb51be2d169 code=0x7ffc0000 [ 169.196237][ T29] audit: type=1326 audit(1744332543.576:4094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9354 comm="syz.0.1962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb51be2d169 code=0x7ffc0000 [ 169.283216][ T29] audit: type=1326 audit(1744332543.776:4095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9368 comm="syz.3.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd78448d169 code=0x7ffc0000 [ 169.306818][ T29] audit: type=1326 audit(1744332543.776:4096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9368 comm="syz.3.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd78448d169 code=0x7ffc0000 [ 169.331000][ T29] audit: type=1326 audit(1744332543.776:4097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9368 comm="syz.3.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd78448d169 code=0x7ffc0000 [ 169.354496][ T29] audit: type=1326 audit(1744332543.776:4098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9368 comm="syz.3.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd78448d169 code=0x7ffc0000 [ 169.362114][ T9371] batadv1: entered allmulticast mode [ 169.387218][ T9367] loop1: detected capacity change from 0 to 4096 [ 169.396499][ T9367] EXT4-fs: Ignoring removed orlov option [ 169.402314][ T9367] EXT4-fs: Ignoring removed nobh option [ 169.423697][ T9367] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.444586][ T9367] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.1967: Failed to acquire dquot type 1 [ 169.499971][ T9380] loop2: detected capacity change from 0 to 2048 [ 169.502196][ T9382] __nla_validate_parse: 2 callbacks suppressed [ 169.502215][ T9382] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1972'. [ 169.506966][ T9380] EXT4-fs: Ignoring removed mblk_io_submit option [ 169.550194][ T9388] loop4: detected capacity change from 0 to 512 [ 169.558046][ T9380] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.579699][ T9388] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.592733][ T9388] ext4 filesystem being mounted at /400/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.608413][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.642506][ T9394] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1978'. [ 169.673120][ T9395] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.1976: corrupted xattr block 32: invalid header [ 169.692451][ T9395] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 169.701703][ T9395] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.1976: corrupted xattr block 32: invalid header [ 169.718398][ T9395] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 169.727824][ T9395] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.1976: corrupted xattr block 32: invalid header [ 169.790647][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.838641][ T9407] pim6reg: entered allmulticast mode [ 169.862960][ T9409] loop4: detected capacity change from 0 to 256 [ 169.871048][ T9409] vfat: Unknown parameter '' [ 169.884835][ T9410] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1982'. [ 169.938860][ T9415] FAULT_INJECTION: forcing a failure. [ 169.938860][ T9415] name failslab, interval 1, probability 0, space 0, times 0 [ 169.951704][ T9415] CPU: 0 UID: 0 PID: 9415 Comm: syz.3.1986 Not tainted 6.15.0-rc1-syzkaller-00095-g2eb959eeecc6 #0 PREEMPT(voluntary) [ 169.951738][ T9415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 169.951810][ T9415] Call Trace: [ 169.951817][ T9415] [ 169.951826][ T9415] dump_stack_lvl+0xf6/0x150 [ 169.951855][ T9415] dump_stack+0x15/0x1a [ 169.951875][ T9415] should_fail_ex+0x261/0x270 [ 169.951910][ T9415] should_failslab+0x8f/0xb0 [ 169.951947][ T9415] kmem_cache_alloc_noprof+0x59/0x340 [ 169.952042][ T9415] ? alloc_empty_file+0x78/0x200 [ 169.952064][ T9415] ? _raw_spin_unlock+0x26/0x50 [ 169.952152][ T9415] alloc_empty_file+0x78/0x200 [ 169.952175][ T9415] alloc_file_pseudo+0xcb/0x160 [ 169.952269][ T9415] anon_inode_getfile+0xa3/0x120 [ 169.952348][ T9415] __se_sys_perf_event_open+0x1886/0x2220 [ 169.952449][ T9415] __x64_sys_perf_event_open+0x67/0x80 [ 169.952488][ T9415] x64_sys_call+0x27bb/0x2e10 [ 169.952515][ T9415] do_syscall_64+0xc9/0x1c0 [ 169.952628][ T9415] ? clear_bhb_loop+0x25/0x80 [ 169.952666][ T9415] ? clear_bhb_loop+0x25/0x80 [ 169.952693][ T9415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.952719][ T9415] RIP: 0033:0x7fd78448d169 [ 169.952737][ T9415] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.952759][ T9415] RSP: 002b:00007fd782af7038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 169.952969][ T9415] RAX: ffffffffffffffda RBX: 00007fd7846a5fa0 RCX: 00007fd78448d169 [ 169.952981][ T9415] RDX: dfffffffffffffff RSI: 0000000000000000 RDI: 0000200000000380 [ 169.952993][ T9415] RBP: 00007fd782af7090 R08: 0000000000000008 R09: 0000000000000000 [ 169.953005][ T9415] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 169.953025][ T9415] R13: 0000000000000001 R14: 00007fd7846a5fa0 R15: 00007ffdb89857a8 [ 169.953048][ T9415] [ 170.150519][ T9417] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1987'. [ 170.182776][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.218503][ T9419] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 170.226011][ T9419] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 170.339023][ T9431] FAULT_INJECTION: forcing a failure. [ 170.339023][ T9431] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 170.352563][ T9431] CPU: 1 UID: 0 PID: 9431 Comm: syz.3.1994 Not tainted 6.15.0-rc1-syzkaller-00095-g2eb959eeecc6 #0 PREEMPT(voluntary) [ 170.352676][ T9431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 170.352692][ T9431] Call Trace: [ 170.352700][ T9431] [ 170.352709][ T9431] dump_stack_lvl+0xf6/0x150 [ 170.352782][ T9431] dump_stack+0x15/0x1a [ 170.352845][ T9431] should_fail_ex+0x261/0x270 [ 170.352948][ T9431] should_fail_alloc_page+0xfd/0x110 [ 170.352987][ T9431] __alloc_frozen_pages_noprof+0x11d/0x360 [ 170.353025][ T9431] alloc_pages_mpol+0xb6/0x260 [ 170.353053][ T9431] vma_alloc_folio_noprof+0x19c/0x300 [ 170.353118][ T9431] handle_mm_fault+0xdda/0x2e80 [ 170.353168][ T9431] exc_page_fault+0x296/0x6a0 [ 170.353192][ T9431] ? __rcu_read_unlock+0x34/0x70 [ 170.353290][ T9431] asm_exc_page_fault+0x26/0x30 [ 170.353316][ T9431] RIP: 0010:rep_movs_alternative+0x11/0x90 [ 170.353343][ T9431] Code: c3 cc cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f 8a 06 <88> 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f [ 170.353365][ T9431] RSP: 0018:ffffc90010acbea8 EFLAGS: 00050202 [ 170.353384][ T9431] RAX: ffff888103506d00 RBX: 0000200000000004 RCX: 0000000000000004 [ 170.353398][ T9431] RDX: 0000000000000000 RSI: ffffc90010acbee0 RDI: 0000200000000000 [ 170.353489][ T9431] RBP: ffffc90010acbf48 R08: 0000000080000000 R09: 0000000000000000 [ 170.353504][ T9431] R10: 0001c90010acbee0 R11: 0001c90010acbee3 R12: 0000000000000004 [ 170.353519][ T9431] R13: 00007ffffffff000 R14: 0000200000000000 R15: ffffc90010acbee0 [ 170.353543][ T9431] _copy_to_user+0x7c/0xa0 [ 170.353584][ T9431] __se_sys_sched_getparam+0xb4/0xf0 [ 170.353675][ T9431] x64_sys_call+0x11bb/0x2e10 [ 170.353702][ T9431] do_syscall_64+0xc9/0x1c0 [ 170.353738][ T9431] ? clear_bhb_loop+0x25/0x80 [ 170.353806][ T9431] ? clear_bhb_loop+0x25/0x80 [ 170.353833][ T9431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.353863][ T9431] RIP: 0033:0x7fd78448d169 [ 170.353881][ T9431] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.353901][ T9431] RSP: 002b:00007fd782af7038 EFLAGS: 00000246 ORIG_RAX: 000000000000008f [ 170.353922][ T9431] RAX: ffffffffffffffda RBX: 00007fd7846a5fa0 RCX: 00007fd78448d169 [ 170.353936][ T9431] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000379 [ 170.353950][ T9431] RBP: 00007fd782af7090 R08: 0000000000000000 R09: 0000000000000000 [ 170.353983][ T9431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.353997][ T9431] R13: 0000000000000000 R14: 00007fd7846a5fa0 R15: 00007ffdb89857a8 [ 170.354019][ T9431] [ 170.718895][ T9438] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(13) [ 170.725542][ T9438] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 170.733345][ T9438] vhci_hcd vhci_hcd.0: Device attached [ 171.049480][ T9443] vhci_hcd: connection closed [ 171.049737][ T3323] vhci_hcd: stop threads [ 171.058831][ T3323] vhci_hcd: release socket [ 171.063377][ T3323] vhci_hcd: disconnect device [ 171.069169][ T36] usb 1-1: new low-speed USB device number 7 using vhci_hcd [ 171.079453][ T36] usb 1-1: enqueue for inactive port 0 [ 171.084963][ T36] usb 1-1: enqueue for inactive port 0 [ 171.119396][ T9472] loop2: detected capacity change from 0 to 512 [ 171.127359][ T36] usb 1-1: enqueue for inactive port 0 [ 171.153211][ T9472] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.174607][ T9472] ext4 filesystem being mounted at /406/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.198275][ T36] vhci_hcd: vhci_device speed not set [ 171.315986][ T9484] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.2009: corrupted xattr block 32: invalid header [ 171.339655][ T9486] FAULT_INJECTION: forcing a failure. [ 171.339655][ T9486] name failslab, interval 1, probability 0, space 0, times 0 [ 171.352344][ T9486] CPU: 1 UID: 0 PID: 9486 Comm: syz.4.2013 Not tainted 6.15.0-rc1-syzkaller-00095-g2eb959eeecc6 #0 PREEMPT(voluntary) [ 171.352377][ T9486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 171.352404][ T9486] Call Trace: [ 171.352410][ T9486] [ 171.352467][ T9486] dump_stack_lvl+0xf6/0x150 [ 171.352496][ T9486] dump_stack+0x15/0x1a [ 171.352517][ T9486] should_fail_ex+0x261/0x270 [ 171.352550][ T9486] should_failslab+0x8f/0xb0 [ 171.352585][ T9486] __kmalloc_cache_noprof+0x55/0x320 [ 171.352608][ T9486] ? audit_log_d_path+0x8e/0x150 [ 171.352755][ T9486] audit_log_d_path+0x8e/0x150 [ 171.352804][ T9486] audit_log_d_path_exe+0x42/0x70 [ 171.352827][ T9486] audit_log_task+0x1f1/0x250 [ 171.352851][ T9486] audit_seccomp+0x68/0x130 [ 171.352870][ T9486] __seccomp_filter+0x694/0x10e0 [ 171.352902][ T9486] ? vfs_write+0x669/0x950 [ 171.352941][ T9486] ? putname+0xe1/0x100 [ 171.352967][ T9486] __secure_computing+0x7e/0x160 [ 171.352995][ T9486] syscall_trace_enter+0xcf/0x1f0 [ 171.353024][ T9486] ? fpregs_assert_state_consistent+0x83/0xa0 [ 171.353129][ T9486] do_syscall_64+0xaa/0x1c0 [ 171.353218][ T9486] ? clear_bhb_loop+0x25/0x80 [ 171.353240][ T9486] ? clear_bhb_loop+0x25/0x80 [ 171.353266][ T9486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.353292][ T9486] RIP: 0033:0x7fe5aa14d169 [ 171.353311][ T9486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.353333][ T9486] RSP: 002b:00007fe5a87af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 171.353432][ T9486] RAX: ffffffffffffffda RBX: 00007fe5aa365fa0 RCX: 00007fe5aa14d169 [ 171.353446][ T9486] RDX: 0000000000000001 RSI: 0000200000000880 RDI: ffffffffffffffff [ 171.353461][ T9486] RBP: 00007fe5a87af090 R08: 0000000000000000 R09: 0000000000000000 [ 171.353476][ T9486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.353488][ T9486] R13: 0000000000000000 R14: 00007fe5aa365fa0 R15: 00007fffd781a498 [ 171.353509][ T9486] [ 171.559957][ T9484] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 171.569128][ T9484] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.2009: corrupted xattr block 32: invalid header [ 171.582648][ T9484] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 171.592033][ T9484] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.2009: corrupted xattr block 32: invalid header [ 171.668134][ T9493] loop4: detected capacity change from 0 to 128 [ 171.677517][ T9493] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 550) [ 171.686282][ T9493] FAT-fs (loop4): Filesystem has been set read-only [ 171.708712][ T9488] loop3: detected capacity change from 0 to 512 [ 171.716947][ T9488] EXT4-fs: Ignoring removed mblk_io_submit option [ 171.725305][ T9488] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 171.775284][ T9488] EXT4-fs (loop3): 1 truncate cleaned up [ 171.784824][ T9488] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.804624][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.883720][ T9505] loop2: detected capacity change from 0 to 512 [ 171.926005][ T9505] EXT4-fs (loop2): orphan cleanup on readonly fs [ 171.932576][ T23] IPVS: starting estimator thread 0... [ 171.932769][ T9505] EXT4-fs error (device loop2): ext4_orphan_get:1416: comm syz.2.2020: bad orphan inode 13 [ 171.953805][ T9509] loop4: detected capacity change from 0 to 512 [ 171.960274][ T9505] ext4_test_bit(bit=12, block=18) = 1 [ 171.965850][ T9505] is_bad_inode(inode)=0 [ 171.970025][ T9505] NEXT_ORPHAN(inode)=2130706432 [ 171.974934][ T9505] max_ino=32 [ 171.978196][ T9505] i_nlink=1 [ 171.986186][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.007084][ T9509] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.030538][ T9505] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 172.036077][ T9511] IPVS: using max 2304 ests per chain, 115200 per kthread [ 172.078203][ T9509] ext4 filesystem being mounted at /419/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.142451][ T9505] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 172.169257][ T9517] bond_slave_1: mtu less than device minimum [ 172.189581][ T9505] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 172.198200][ T9522] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.2023: corrupted xattr block 32: invalid header [ 172.219415][ T9521] loop3: detected capacity change from 0 to 2048 [ 172.242199][ T9522] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 172.271606][ T9521] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.303603][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.364514][ T9522] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.2023: corrupted xattr block 32: invalid header [ 172.393964][ T9534] loop2: detected capacity change from 0 to 512 [ 172.445372][ T9538] loop0: detected capacity change from 0 to 128 [ 172.451906][ T9522] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 172.462926][ T9522] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.2023: corrupted xattr block 32: invalid header [ 172.485975][ T9538] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 172.487365][ T9534] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.520849][ T9534] ext4 filesystem being mounted at /408/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.598685][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.643205][ T9549] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.2028: corrupted xattr block 32: invalid header [ 172.661250][ T9549] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 172.688506][ T9554] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.2028: corrupted xattr block 32: invalid header [ 172.729131][ T9567] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9567 comm=syz.1.2036 [ 172.752303][ T9549] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.2028: corrupted xattr block 32: invalid header [ 172.790893][ T9570] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2028'. [ 172.840489][ T9554] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 172.863635][ T9554] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.2028: corrupted xattr block 32: invalid header [ 172.879351][ T9549] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 172.908463][ T9549] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.2028: corrupted xattr block 32: invalid header [ 173.061070][ T9595] loop0: detected capacity change from 0 to 512 [ 173.077572][ T9599] xt_CT: You must specify a L4 protocol and not use inversions on it [ 173.085398][ T9595] EXT4-fs: Ignoring removed mblk_io_submit option [ 173.092329][ T9549] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 173.104213][ T9595] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 173.117004][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.129773][ T9595] EXT4-fs (loop0): 1 truncate cleaned up [ 173.137977][ T9595] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.185426][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.208352][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.355767][ T9636] Invalid logical block size (7) [ 173.400663][ T9652] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2053'. [ 173.412191][ T9654] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2053'. [ 173.433129][ T9611] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2044'. [ 173.495367][ T9667] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2055'. [ 173.504361][ T9667] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2055'. [ 173.554862][ T9676] loop2: detected capacity change from 0 to 512 [ 173.570997][ T9676] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.587316][ T9676] ext4 filesystem being mounted at /415/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.666972][ T9688] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.2056: corrupted xattr block 32: invalid header [ 173.690026][ T9688] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 173.701049][ T9688] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.2056: corrupted xattr block 32: invalid header [ 173.715027][ T9688] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 173.742916][ T9676] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.2056: corrupted xattr block 32: invalid header [ 173.756414][ T9688] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.2056: corrupted xattr block 32: invalid header [ 173.781910][ T9676] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 173.801390][ T9688] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 173.815685][ T9676] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.2056: corrupted xattr block 32: invalid header [ 173.902081][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.191676][ T9729] loop2: detected capacity change from 0 to 2048 [ 174.200578][ T9729] EXT4-fs: Ignoring removed mblk_io_submit option [ 174.229978][ T9729] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.323342][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.487589][ T9774] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 174.495119][ T9774] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 174.546375][ T9780] xt_CT: You must specify a L4 protocol and not use inversions on it [ 174.690181][ T9791] xt_CT: You must specify a L4 protocol and not use inversions on it [ 174.706842][ T9794] loop2: detected capacity change from 0 to 512 [ 174.719442][ T9794] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.732358][ T9794] ext4 filesystem being mounted at /424/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.807402][ T9800] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.2083: corrupted xattr block 32: invalid header [ 174.904623][ T9804] __nla_validate_parse: 3 callbacks suppressed [ 174.904642][ T9804] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2083'. [ 174.934517][ T9800] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 174.954681][ T9800] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.2083: corrupted xattr block 32: invalid header [ 175.012094][ T9801] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.2083: corrupted xattr block 32: invalid header [ 175.034267][ T9806] loop0: detected capacity change from 0 to 2048 [ 175.038748][ T9801] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 175.052324][ T9800] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 175.060120][ T9806] EXT4-fs: Ignoring removed mblk_io_submit option [ 175.061469][ T9801] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.2083: corrupted xattr block 32: invalid header [ 175.090821][ T9800] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.2083: corrupted xattr block 32: invalid header [ 175.111429][ T29] kauditd_printk_skb: 116 callbacks suppressed [ 175.111509][ T29] audit: type=1400 audit(1744332549.607:4213): avc: denied { ioctl } for pid=9793 comm="syz.2.2083" path="socket:[27615]" dev="sockfs" ino=27615 ioctlcmd=0x7451 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 175.148836][ T9800] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 175.168467][ T9806] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.259877][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.286123][ T23] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 175.293970][ T23] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 175.301796][ T23] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 175.322819][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.365576][ T9823] loop1: detected capacity change from 0 to 1024 [ 175.399015][ T23] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 175.406886][ T23] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 175.414703][ T23] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 175.422678][ T23] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 175.430510][ T23] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 175.438304][ T23] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 175.446189][ T23] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 175.453932][ T9828] sd 0:0:1:0: device reset [ 175.453946][ T23] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 175.458417][ T23] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 175.458485][ T23] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 175.458511][ T23] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 175.461161][ T23] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 175.497759][ T23] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 175.505621][ T23] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 175.513427][ T23] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 175.521240][ T23] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 175.529069][ T23] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 175.536821][ T23] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 175.544574][ T23] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 175.549258][ T29] audit: type=1326 audit(1744332550.007:4214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9824 comm="syz.2.2093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16b7fbd169 code=0x7ffc0000 [ 175.552314][ T23] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 175.575745][ T29] audit: type=1326 audit(1744332550.007:4215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9824 comm="syz.2.2093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f16b7fbd169 code=0x7ffc0000 [ 175.583427][ T23] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 175.606783][ T29] audit: type=1326 audit(1744332550.007:4216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9824 comm="syz.2.2093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16b7fbd169 code=0x7ffc0000 [ 175.606818][ T29] audit: type=1326 audit(1744332550.007:4217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9824 comm="syz.2.2093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7f16b7fbd169 code=0x7ffc0000 [ 175.606848][ T29] audit: type=1326 audit(1744332550.007:4218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9824 comm="syz.2.2093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16b7fbd169 code=0x7ffc0000 [ 175.614607][ T23] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 175.637972][ T29] audit: type=1326 audit(1744332550.007:4219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9824 comm="syz.2.2093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f16b7fbd169 code=0x7ffc0000 [ 175.661407][ T23] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 175.684820][ T29] audit: type=1400 audit(1744332550.007:4220): avc: denied { ioctl } for pid=9824 comm="syz.2.2093" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 175.692540][ T23] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 175.692566][ T23] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 175.715829][ T29] audit: type=1326 audit(1744332550.007:4221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9824 comm="syz.2.2093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16b7fbd169 code=0x7ffc0000 [ 175.723550][ T23] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 175.748307][ T29] audit: type=1326 audit(1744332550.007:4222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9824 comm="syz.2.2093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f16b7fbd169 code=0x7ffc0000 [ 175.787651][ T23] hid-generic 0000:0000:20000000.0001: hidraw0: HID v0.01 Device [syz0] on syz1 [ 175.795662][ T9830] loop4: detected capacity change from 0 to 2048 [ 175.838723][ T9830] EXT4-fs: Ignoring removed mblk_io_submit option [ 175.848948][ T9831] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2094'. [ 175.880669][ T9823] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.903492][ T9828] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2094'. [ 175.938341][ T9823] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2092: bg 0: block 88: padding at end of block bitmap is not set [ 175.974045][ T9823] bridge_slave_0: left allmulticast mode [ 175.979812][ T9823] bridge_slave_0: left promiscuous mode [ 175.985593][ T9823] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.994906][ T9830] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.008954][ T9823] bridge_slave_1: left allmulticast mode [ 176.014803][ T9823] bridge_slave_1: left promiscuous mode [ 176.020838][ T9823] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.029345][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.042588][ T9823] bond0: (slave bond_slave_0): Releasing backup interface [ 176.055812][ T9823] bond0: (slave bond_slave_1): Releasing backup interface [ 176.072089][ T9823] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.079650][ T9823] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.092212][ T9823] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.099969][ T9823] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.184096][ T9856] loop3: detected capacity change from 0 to 2048 [ 176.192097][ T9856] EXT4-fs: Ignoring removed mblk_io_submit option [ 176.211859][ T9856] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.241632][ T9862] loop4: detected capacity change from 0 to 512 [ 176.248827][ T9862] journal_path: Non-blockdev passed as './bus' [ 176.255212][ T9862] EXT4-fs: error: could not find journal device path [ 176.296964][ T9868] loop4: detected capacity change from 0 to 2048 [ 176.303763][ T9868] EXT4-fs: Ignoring removed mblk_io_submit option [ 176.327168][ T9871] loop1: detected capacity change from 0 to 512 [ 176.339180][ T9871] ext4 filesystem being mounted at /414/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.434281][ T9879] block device autoloading is deprecated and will be removed. [ 176.450960][ T9887] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.2109: corrupted xattr block 32: invalid header [ 176.466120][ T9879] bio_check_eod: 43 callbacks suppressed [ 176.466137][ T9879] syz.3.2111: attempt to access beyond end of device [ 176.466137][ T9879] md33: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 176.507159][ T9885] IPv6: NLM_F_CREATE should be specified when creating new route [ 176.517458][ T9887] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 176.529194][ T9887] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.2109: corrupted xattr block 32: invalid header [ 176.546305][ T9889] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.2109: corrupted xattr block 32: invalid header [ 176.561247][ T9887] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 176.580851][ T9889] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 176.591095][ T9889] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.2109: corrupted xattr block 32: invalid header [ 176.635233][ T9887] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.2109: corrupted xattr block 32: invalid header [ 176.643037][ T9898] loop4: detected capacity change from 0 to 512 [ 176.684141][ T9887] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 176.694851][ T9898] ext4 filesystem being mounted at /442/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.701992][ T9871] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2109'. [ 176.706533][ T9903] netlink: 'syz.0.2121': attribute type 2 has an invalid length. [ 176.722467][ T9901] loop3: detected capacity change from 0 to 2048 [ 176.733759][ T9901] EXT4-fs: Ignoring removed mblk_io_submit option [ 176.777608][ T9910] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.2119: corrupted xattr block 32: invalid header [ 176.809187][ T9913] loop2: detected capacity change from 0 to 2048 [ 176.819756][ T9910] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 176.825525][ T9913] EXT4-fs: Ignoring removed mblk_io_submit option [ 176.836286][ T9910] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.2119: corrupted xattr block 32: invalid header [ 176.857567][ T9910] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 176.869418][ T9898] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.2119: corrupted xattr block 32: invalid header [ 176.882933][ T9910] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.2119: corrupted xattr block 32: invalid header [ 176.897465][ T9898] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 176.907647][ T9910] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 176.912996][ T9898] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.2119: corrupted xattr block 32: invalid header [ 176.930991][ T9917] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2119'. [ 176.993865][ T9924] IPv6: NLM_F_CREATE should be specified when creating new route [ 177.008493][ T9929] loop3: detected capacity change from 0 to 512 [ 177.015032][ T9929] journal_path: Non-blockdev passed as './bus' [ 177.021255][ T9929] EXT4-fs: error: could not find journal device path [ 177.113680][ T9932] xt_CT: You must specify a L4 protocol and not use inversions on it [ 177.366843][ T9962] loop1: detected capacity change from 0 to 512 [ 177.373672][ T9962] journal_path: Non-blockdev passed as './bus' [ 177.379915][ T9962] EXT4-fs: error: could not find journal device path [ 177.519425][ T9967] loop0: detected capacity change from 0 to 512 [ 177.531430][ T9969] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2146'. [ 177.549962][ T9969] loop4: detected capacity change from 0 to 512 [ 177.582340][ T9969] EXT4-fs: Ignoring removed nomblk_io_submit option [ 177.591456][ T9969] EXT4-fs: Ignoring removed i_version option [ 177.629303][ T9967] ext4 filesystem being mounted at /460/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.680007][ T9969] EXT4-fs (loop4): 1 orphan inode deleted [ 177.780857][ T9974] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.2145: corrupted xattr block 32: invalid header [ 177.858626][ T9974] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 177.867797][ T9974] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.2145: corrupted xattr block 32: invalid header [ 177.883291][ T9974] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 177.892429][ T9974] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.2145: corrupted xattr block 32: invalid header [ 177.906626][ T9974] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 177.908515][ T9975] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.2145: corrupted xattr block 32: invalid header [ 177.944425][ T9975] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 177.962851][ T9975] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.2145: corrupted xattr block 32: invalid header [ 177.963586][ T9977] SELinux: policydb version 478 does not match my version range 15-34 [ 177.986938][ T9967] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2145'. [ 177.997495][ T9977] SELinux: failed to load policy [ 178.055783][ T9982] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 178.063287][ T9982] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 178.129361][ T9980] xt_CT: You must specify a L4 protocol and not use inversions on it [ 178.229336][ T9987] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(13) [ 178.236000][ T9987] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 178.243723][ T9987] vhci_hcd vhci_hcd.0: Device attached [ 178.520284][T10016] loop3: detected capacity change from 0 to 512 [ 178.561173][T10016] ext4 filesystem being mounted at /389/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.595118][ T36] usb 9-1: new low-speed USB device number 6 using vhci_hcd [ 178.707278][T10024] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.2162: corrupted xattr block 32: invalid header [ 178.799469][T10024] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 178.818758][T10024] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.2162: corrupted xattr block 32: invalid header [ 178.833178][T10024] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 178.851148][T10024] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.2162: corrupted xattr block 32: invalid header [ 178.886402][ T9988] vhci_hcd: connection reset by peer [ 178.892994][ T3323] vhci_hcd: stop threads [ 178.897330][ T3323] vhci_hcd: release socket [ 178.901865][ T3323] vhci_hcd: disconnect device [ 178.996844][T10030] xt_CT: You must specify a L4 protocol and not use inversions on it [ 179.082312][T10034] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2167'. [ 179.091273][T10034] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2167'. [ 179.325117][T10048] loop0: detected capacity change from 0 to 1024 [ 179.353409][T10053] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2172'. [ 179.370533][T10048] ext4 filesystem being mounted at /463/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.375180][T10052] Invalid logical block size (7) [ 179.390791][ T51] ================================================================== [ 179.390839][ T51] BUG: KCSAN: data-race in n_tty_receive_buf_common / n_tty_write [ 179.406698][ T51] [ 179.406714][ T51] write to 0xffffc900117c9020 of 8 bytes by task 10057 on cpu 0: [ 179.406729][ T51] n_tty_write+0x1c4/0xb20 [ 179.406760][ T51] file_tty_write+0x382/0x6a0 [ 179.406783][ T51] tty_write+0x28/0x30 [ 179.406802][ T51] vfs_write+0x79b/0x950 [ 179.406828][ T51] ksys_write+0xeb/0x1b0 [ 179.406858][ T51] __x64_sys_write+0x42/0x50 [ 179.406889][ T51] x64_sys_call+0x2a45/0x2e10 [ 179.406911][ T51] do_syscall_64+0xc9/0x1c0 [ 179.406942][ T51] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.406966][ T51] [ 179.406972][ T51] read to 0xffffc900117c9020 of 8 bytes by task 51 on cpu 1: [ 179.406989][ T51] n_tty_receive_buf_common+0x88a/0xbe0 [ 179.407021][ T51] n_tty_receive_buf2+0x33/0x40 [ 179.407050][ T51] tty_ldisc_receive_buf+0x63/0x100 [ 179.407075][ T51] tty_port_default_receive_buf+0x59/0x90 [ 179.407100][ T51] flush_to_ldisc+0x1d1/0x410 [ 179.407122][ T51] process_scheduled_works+0x4de/0xa20 [ 179.407159][ T51] worker_thread+0x52c/0x710 [ 179.407176][ T51] kthread+0x4b7/0x540 [ 179.407197][ T51] ret_from_fork+0x4b/0x60 [ 179.407216][ T51] ret_from_fork_asm+0x1a/0x30 [ 179.407240][ T51] [ 179.407245][ T51] value changed: 0x0000000000000000 -> 0x0000000000000007 [ 179.407258][ T51] [ 179.407262][ T51] Reported by Kernel Concurrency Sanitizer on: [ 179.407274][ T51] CPU: 1 UID: 0 PID: 51 Comm: kworker/u8:3 Not tainted 6.15.0-rc1-syzkaller-00095-g2eb959eeecc6 #0 PREEMPT(voluntary) [ 179.407304][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 179.407321][ T51] Workqueue: events_unbound flush_to_ldisc [ 179.407351][ T51] ================================================================== [ 179.512377][T10058] xt_CT: You must specify a L4 protocol and not use inversions on it [ 183.665185][ T36] usb 9-1: enqueue for inactive port 0 [ 183.670718][ T36] usb 9-1: enqueue for inactive port 0 [ 183.755071][ T36] vhci_hcd: vhci_device speed not set